Method HandleGatewayMessage

src/windows/QRCodeDialog.cpp:46–136

}

void QRCodeDialog::HandleGatewayMessage(const std::string& payload)
{
	Json j = Json::parse(payload);
	std::string op = j["op"];

	if (op == "heartbeat")
	{
		Json j2;
		j2["op"] = "heartbeat_ack";
		GetWebsocketClient()->SendMsg(m_gatewayId, j2.dump());
	}
	else if (op == "hello")
	{
		// send server our public key
		Json j2;
		j2["op"] = "init";
		j2["encoded_public_key"] = m_publicKeyBase64;
		GetWebsocketClient()->SendMsg(m_gatewayId, j2.dump());
	}
	else if (op == "nonce_proof")
	{
		char* data = nullptr, *dataEnc = nullptr;
		uint8_t* decryptedData = nullptr;
		EVP_PKEY_CTX* ctx = NULL;

		// separate scope for this bitch due to the goto
		{
			Json j2;

			// server sent us an encrypted Proof of Identity payload, decrypt it using our private key
			// send the server OUR proof which is the SHA256 hash of the proof of the decrypted nonce
			std::string dataB64 = j["encrypted_nonce"];

			// Buffer management is kind of crap here (grimacing)
			data = new char[base64::decoded_size(dataB64.size()) + 5];
			auto decsz = base64::decode(data, dataB64.c_str(), dataB64.size());
			size_t dataSz = decsz.first;
			int res = 0;

			ctx = EVP_PKEY_CTX_new(m_pkey, NULL);

			res = EVP_PKEY_decrypt_init(ctx);
			if (res <= 0) goto NONCE_PROOF_ERROR_LBL;

			if (EVP_PKEY_CTX_ctrl_str(ctx, "rsa_padding_mode", "oaep") <= 0) goto NONCE_PROOF_ERROR_LBL;
			if (EVP_PKEY_CTX_ctrl_str(ctx, "rsa_oaep_md", "sha256") <= 0) goto NONCE_PROOF_ERROR_LBL;
			if (EVP_PKEY_CTX_ctrl_str(ctx, "rsa_mgf1_md", "sha256") <= 0) goto NONCE_PROOF_ERROR_LBL;

			decryptedData = NULL;
			size_t decryptedSize = 0;
			res = EVP_PKEY_decrypt(ctx, NULL, &decryptedSize, (const uint8_t*)data, dataSz);
			if (res <= 0) goto NONCE_PROOF_ERROR_LBL;

			decryptedData = new uint8_t[decryptedSize];
			res = EVP_PKEY_decrypt(ctx, decryptedData, &decryptedSize, (const uint8_t*)data, dataSz);
			if (res <= 0) goto NONCE_PROOF_ERROR_LBL;

			dataEnc = new char[base64::encoded_size(decryptedSize) + 5];