1 ;;; canlock.el --- functions for Cancel-Lock feature
3 ;; Copyright (C) 1998, 1999, 2001, 2002, 2003, 2004
4 ;; Free Software Foundation, Inc.
6 ;; Author: Katsumi Yamaoka <yamaoka@jpl.org>
7 ;; Keywords: news, cancel-lock, hmac, sha1, rfc2104
9 ;; This program is free software; you can redistribute it and/or modify
10 ;; it under the terms of the GNU General Public License as published by
11 ;; the Free Software Foundation; either version 2, or (at your option)
14 ;; This program is distributed in the hope that it will be useful,
15 ;; but WITHOUT ANY WARRANTY; without even the implied warranty of
16 ;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 ;; GNU General Public License for more details.
19 ;; You should have received a copy of the GNU General Public License
20 ;; along with this program; see the file COPYING. If not, write to the
21 ;; Free Software Foundation, Inc., 59 Temple Place - Suite 330,
22 ;; Boston, MA 02111-1307, USA.
26 ;; Canlock is a library for generating and verifying Cancel-Lock and/or
27 ;; Cancel-Key header in news articles. This is used to protect articles
28 ;; from rogue cancel, supersede or replace attacks. The method is based
29 ;; on draft-ietf-usefor-cancel-lock-01.txt which was released on November
30 ;; 3rd 1998. For instance, you can add Cancel-Lock (and possibly Cancel-
31 ;; Key) header in a news article by using a hook which will be evaluated
32 ;; just before sending an article as follows:
34 ;; (add-hook '*e**a*e-header-hook 'canlock-insert-header t)
36 ;; Verifying Cancel-Lock is mainly a function of news servers, however,
37 ;; you can verify your own article using the command `canlock-verify' in
38 ;; the (raw) article buffer. You will be prompted for the password for
39 ;; each time if the option `canlock-password' or `canlock-password-for-
40 ;; verify' is nil. Note that setting these options is a bit unsafe.
50 (sha1 "" nil nil 'binary)
51 (wrong-number-of-arguments
52 (let ((mel (locate-library "mel")))
54 (load (expand-file-name "sha1-el" (file-name-directory mel))
57 (autoload 'mail-fetch-field "mail-utils")
58 (defvar mail-header-separator)
61 "The Cancel-Lock feature."
64 (defcustom canlock-password nil
65 "Password to use when signing a Cancel-Lock or a Cancel-Key header."
66 :type '(radio (const :format "Not specified " nil)
67 (string :tag "Password" :size 0))
70 (defcustom canlock-password-for-verify canlock-password
71 "Password to use when verifying a Cancel-Lock or a Cancel-Key header."
72 :type '(radio (const :format "Not specified " nil)
73 (string :tag "Password" :size 0))
76 (defcustom canlock-force-insert-header nil
77 "If non-nil, insert a Cancel-Lock or a Cancel-Key header even if the
78 buffer does not look like a news message."
83 (defmacro canlock-string-as-unibyte (string)
84 "Return a unibyte string with the same individual bytes as STRING."
85 (if (fboundp 'string-as-unibyte)
86 (list 'string-as-unibyte string)
89 (defun canlock-sha1 (message)
90 "Make a SHA-1 digest of MESSAGE as a unibyte string of length 20 bytes."
92 (let (sha1-maximum-internal-length)
93 (sha1 message nil nil 'binary))
94 (wrong-number-of-arguments
95 (canlock-string-as-unibyte (sha1-binary message)))))
97 (defun canlock-make-cancel-key (message-id password)
98 "Make a Cancel-Key header."
99 (when (> (length password) 20)
100 (setq password (canlock-sha1 password)))
101 (setq password (concat password (make-string (- 64 (length password)) 0)))
102 (let ((ipad (mapconcat (lambda (byte)
103 (char-to-string (logxor 54 byte)))
105 (opad (mapconcat (lambda (byte)
106 (char-to-string (logxor 92 byte)))
108 (base64-encode-string
112 (concat ipad (canlock-string-as-unibyte message-id))))))))
114 (defun canlock-narrow-to-header ()
115 "Narrow the buffer to the head of the message."
116 (let (case-fold-search)
118 (goto-char (point-min))
119 (goto-char (if (re-search-forward
121 (regexp-quote mail-header-separator))
126 (defun canlock-delete-headers ()
127 "Delete Cancel-Key or Cancel-Lock headers in the narrowed buffer."
128 (let ((case-fold-search t))
129 (goto-char (point-min))
130 (while (re-search-forward "^Cancel-\\(Key\\|Lock\\):" nil t)
131 (delete-region (match-beginning 0)
132 (if (re-search-forward "^[^\t ]" nil t)
133 (goto-char (match-beginning 0))
136 (defun canlock-fetch-fields (&optional key)
137 "Return a list of the values of Cancel-Lock header.
138 If KEY is non-nil, look for a Cancel-Key header instead. The buffer
139 is expected to be narrowed to just the headers of the message."
140 (let ((field (mail-fetch-field (if key "Cancel-Key" "Cancel-Lock")))
142 (case-fold-search t))
144 (setq fields (split-string field "[\t\n\r ,]+"))
146 (when (string-match "^sha1:" (setq field (pop fields)))
147 (push (substring field 5) rest)))
150 (defun canlock-fetch-id-for-key ()
151 "Return a Message-ID in Cancel, Supersedes or Replaces header.
152 The buffer is expected to be narrowed to just the headers of the
154 (or (let ((cancel (mail-fetch-field "Control")))
156 (string-match "^cancel[\t ]+\\(<[^\t\n @<>]+@[^\t\n @<>]+>\\)"
158 (match-string 1 cancel)))
159 (mail-fetch-field "Supersedes")
160 (mail-fetch-field "Replaces")))
163 (defun canlock-insert-header (&optional id-for-key id-for-lock password)
164 "Insert a Cancel-Key and/or a Cancel-Lock header if possible."
165 (let (news control key-for-key key-for-lock)
168 (canlock-narrow-to-header)
169 (when (setq news (or canlock-force-insert-header
170 (mail-fetch-field "Newsgroups")))
172 (setq id-for-key (canlock-fetch-id-for-key)))
173 (if (and (setq control (mail-fetch-field "Control"))
174 (string-match "^cancel[\t ]+<[^\t\n @<>]+@[^\t\n @<>]+>"
176 (setq id-for-lock nil)
178 (setq id-for-lock (mail-fetch-field "Message-ID"))))
179 (canlock-delete-headers)
180 (goto-char (point-max))))
182 (if (not (or id-for-key id-for-lock))
183 (message "There are no Message-ID(s)")
185 (setq password (or canlock-password
187 "Password for Canlock: "))))
188 (if (or (not (stringp password)) (zerop (length password)))
189 (message "Password for Canlock is bad")
190 (setq key-for-key (when id-for-key
191 (canlock-make-cancel-key
192 id-for-key password))
193 key-for-lock (when id-for-lock
194 (canlock-make-cancel-key
195 id-for-lock password)))
196 (if (not (or key-for-key key-for-lock))
197 (message "Couldn't insert Canlock header")
199 (insert "Cancel-Key: sha1:" key-for-key "\n"))
201 (insert "Cancel-Lock: sha1:"
202 (base64-encode-string (canlock-sha1 key-for-lock))
206 (defun canlock-verify (&optional buffer)
207 "Verify Cancel-Lock or Cancel-Key in BUFFER.
208 If BUFFER is nil, the current buffer is assumed. Signal an error if
211 (let (keys locks errmsg id-for-key id-for-lock password
212 key-for-key key-for-lock match)
218 (canlock-narrow-to-header)
219 (setq keys (canlock-fetch-fields 'key)
220 locks (canlock-fetch-fields))
221 (if (not (or keys locks))
223 "There are neither Cancel-Lock nor Cancel-Key headers")
224 (setq id-for-key (canlock-fetch-id-for-key)
225 id-for-lock (mail-fetch-field "Message-ID"))
226 (or id-for-key id-for-lock
227 (setq errmsg "There are no Message-ID(s)")))))
230 (setq password (or canlock-password-for-verify
231 (read-passwd "Password for Canlock: ")))
232 (if (or (not (stringp password)) (zerop (length password)))
233 (error "Password for Canlock is bad")
236 (setq key-for-key (canlock-make-cancel-key id-for-key password))
237 (while (and keys (not match))
238 (setq match (string-equal key-for-key (pop keys)))))
239 (setq keys (if match "good" "bad")))
244 (base64-encode-string
245 (canlock-sha1 (canlock-make-cancel-key id-for-lock
247 (when (and locks (not match))
248 (setq match (string-equal key-for-lock (pop locks)))))
249 (setq locks (if match "good" "bad")))
251 (when (member "bad" (list keys locks))
253 (cond ((and keys locks)
254 (message "Cancel-Key is %s, Cancel-Lock is %s" keys locks))
256 (message "Cancel-Lock is %s" locks))
258 (message "Cancel-Key is %s" keys))))))))
262 ;;; canlock.el ends here