1 files changed, 85 insertions, 0 deletions
diff --git a/lib/backupclient/BackupClientCryptoKeys.cpp b/lib/backupclient/BackupClientCryptoKeys.cpp
new file mode 100644
index 00000000..7a8da7ba
--- /dev/null
+++ b/lib/backupclient/BackupClientCryptoKeys.cpp
@@ -0,0 +1,85 @@
+// --------------------------------------------------------------------------
+//
+// File
+//		Name:    BackupClientCryptoKeys.cpp
+//		Purpose: function for setting up all the backup client keys
+//		Created: 1/12/03
+//
+// --------------------------------------------------------------------------
+
+#include "Box.h"
+
+#include <string.h>
+
+#include "BackupClientCryptoKeys.h"
+#include "FileStream.h"
+#include "BackupStoreFilenameClear.h"
+#include "BackupStoreException.h"
+#include "BackupClientFileAttributes.h"
+#include "BackupStoreFile.h"
+
+#include "MemLeakFindOn.h"
+
+// --------------------------------------------------------------------------
+//
+// Function
+//		Name:    BackupClientCryptoKeys_Setup(const char *)
+//		Purpose: Read in the key material file, and set keys to all the backup elements required.
+//		Created: 1/12/03
+//
+// --------------------------------------------------------------------------
+void BackupClientCryptoKeys_Setup(const std::string& rKeyMaterialFilename)
+{
+	// Read in the key material
+	unsigned char KeyMaterial[BACKUPCRYPTOKEYS_FILE_SIZE];
+	
+	// Open the file
+	FileStream file(rKeyMaterialFilename);
+
+	// Read in data
+	if(!file.ReadFullBuffer(KeyMaterial, BACKUPCRYPTOKEYS_FILE_SIZE, 0))
+	{
+		THROW_EXCEPTION(BackupStoreException, CouldntLoadClientKeyMaterial)
+	}
+	
+	// Setup keys and encoding method for filename encryption
+	BackupStoreFilenameClear::SetBlowfishKey(
+		KeyMaterial + BACKUPCRYPTOKEYS_FILENAME_KEY_START,
+		BACKUPCRYPTOKEYS_FILENAME_KEY_LENGTH,
+		KeyMaterial + BACKUPCRYPTOKEYS_FILENAME_IV_START,
+		BACKUPCRYPTOKEYS_FILENAME_IV_LENGTH);
+	BackupStoreFilenameClear::SetEncodingMethod(
+		BackupStoreFilename::Encoding_Blowfish);
+
+	// Setup key for attributes encryption
+	BackupClientFileAttributes::SetBlowfishKey(
+		KeyMaterial + BACKUPCRYPTOKEYS_ATTRIBUTES_KEY_START, 
+		BACKUPCRYPTOKEYS_ATTRIBUTES_KEY_LENGTH);
+
+	// Setup secret for attribute hashing
+	BackupClientFileAttributes::SetAttributeHashSecret(
+		KeyMaterial + BACKUPCRYPTOKEYS_ATTRIBUTE_HASH_SECRET_START,
+		BACKUPCRYPTOKEYS_ATTRIBUTE_HASH_SECRET_LENGTH);
+
+	// Setup keys for file data encryption
+	BackupStoreFile::SetBlowfishKeys(
+		KeyMaterial + BACKUPCRYPTOKEYS_ATTRIBUTES_KEY_START,
+		BACKUPCRYPTOKEYS_ATTRIBUTES_KEY_LENGTH,
+		KeyMaterial + BACKUPCRYPTOKEYS_FILE_BLOCK_ENTRY_KEY_START,
+		BACKUPCRYPTOKEYS_FILE_BLOCK_ENTRY_KEY_LENGTH);
+
+#ifndef HAVE_OLD_SSL
+	// Use AES where available
+	BackupStoreFile::SetAESKey(
+		KeyMaterial + BACKUPCRYPTOKEYS_FILE_AES_KEY_START,
+		BACKUPCRYPTOKEYS_FILE_AES_KEY_LENGTH);
+#endif
+
+	// Wipe the key material from memory
+	#ifdef _MSC_VER // not defined on MinGW
+		SecureZeroMemory(KeyMaterial, BACKUPCRYPTOKEYS_FILE_SIZE);
+	#else
+		::memset(KeyMaterial, 0, BACKUPCRYPTOKEYS_FILE_SIZE);
+	#endif
+}
+