Ace:IMSPython - Revision history

Toaster at 21:03, 7 January 2011

2011-01-07T21:03:59Z

← Older revision		Revision as of 21:03, 7 January 2011
Line 69:		Line 69:
	</pre>		</pre>

	=~~Secure One File~~=		=Generate a token for a file=

	Using hashlib, and binascii we can use python to both generate a digest and grab an ace token for that digest.		Using hashlib, and binascii we can use python to both generate a digest and grab an ace token for that digest.

			While this example only sends one request in a call, you should batch your requests prior to requesting a token. Just send a 'list' of tokenRequest objects to requestTokensImmediate. The IMS will support up to 10,000 requests per call.

	===Code===		===Code===
	<pre>		<pre>
Line 133:		Line 136:
	</pre>		</pre>

	~~=Bulk sending=~~

	Rather than sending one token per request, you should create batches to send. Just send a 'list' of tokenRequest objects to requestTokensImmediate. The IMS currently supports up to 10,000 tokens per request.		=Round Requests=

	~~=Round Requests=~~		In order to validate the proof for any file, you need to recompute the proof result and compare that to the round hash stored on the IMS. The getRoundSummaries should be used to request the hash for previously generated rounds.

			You can find the id for the round you need to retrieve in the roundId field in an ace token.

	~~You can request the round hashes for one or more rounds using getRoundSummaries.~~
	===Code===		===Code===
	<pre>		<pre>

Toaster at 20:59, 7 January 2011

2011-01-07T20:59:06Z

← Older revision		Revision as of 20:59, 7 January 2011
Line 6:		Line 6:

	=Request One Token=		=Request One Token=

			The ACE IMS provides a requestTokensImmediate call which can be used to request tokens for a supplied set of hash values. The tokens returned from this call can be used to validate the hash of any file hasn't been modified.

	===Code===		===Code===
	<pre>		<pre>
Line 20:		Line 23:
	</pre>		</pre>

	~~Here~~'s the result of ~~running it:~~		The resulting token contains the name you supplied in the request, a proof for the hash value you submitted, and importantly the round ID and digest algorithm used to calculate the proof. You will use the round, digest algorithm and proof to later validate a file's hash value.

			* digestService - digest algorithm used to build proof
			* name - descriptive name you supplied in the request
			* proofElements - proof hashes used to validate file
			* roundID - which round were these tokens part of, used to validate proof result

			The other items are also returned, but are not necessary to validate a proof
			* statusCode - 100 if success, some other number otherwise (see source code)
			* timestamp - exact time of token generation, useful, but should not be trusted as its not linked to the proof
			* tokenClassName - internal queue used to generate this queue, useful for debugging only

	===Output===		===Output===
	<pre>		<pre>

Toaster at 20:49, 7 January 2011

2011-01-07T20:49:09Z

← Older revision		Revision as of 20:49, 7 January 2011
Line 58:		Line 58:

	Using hashlib, and binascii we can use python to both generate a digest and grab an ace token for that digest.		Using hashlib, and binascii we can use python to both generate a digest and grab an ace token for that digest.
			===Code===
	<pre>		<pre>
	import hashlib		import hashlib
Line 84:		Line 84:
	</pre>		</pre>

	~~And the output:~~		===Output===

	<pre>		<pre>
	[python] [toaster@loach ace-cli]$ python test2.py		[python] [toaster@loach ace-cli]$ python test2.py
Line 127:		Line 126:

	You can request the round hashes for one or more rounds using getRoundSummaries.		You can request the round hashes for one or more rounds using getRoundSummaries.
			===Code===
	<pre>		<pre>
	from suds.client import Client		from suds.client import Client
Line 139:		Line 138:
	</pre>		</pre>

	~~output~~		===Output===
	<pre>		<pre>
	[python] [toaster@loach ace-cli]$ python test2.py		[python] [toaster@loach ace-cli]$ python test2.py
Line 150:		Line 149:
	This example will read a file, compute its digest and request a token. It will then recompute the round hash using the		This example will read a file, compute its digest and request a token. It will then recompute the round hash using the

			===Code===
	<pre>		<pre>
	import hashlib		import hashlib
Line 211:		Line 211:
	</pre>		</pre>

	~~And now the output:~~		===Output===
	<pre>		<pre>
	[python] [toaster@loach ace-cli]$ python test2.py		[python] [toaster@loach ace-cli]$ python test2.py
Line 259:		Line 259:
	The createWitnessProofForRound call will generate a proof which links that round to the daily witness value. These calls take a little bit of time to run since the IMS will compute this proof on demand for you.		The createWitnessProofForRound call will generate a proof which links that round to the daily witness value. These calls take a little bit of time to run since the IMS will compute this proof on demand for you.

			===Code===
	<pre>		<pre>
	import hashlib		import hashlib
Line 310:		Line 311:
	</pre>		</pre>

	Output:		===Output===

	<pre>		<pre>
	[python] [toaster@loach ace-cli]$ python test3.py		[python] [toaster@loach ace-cli]$ python test3.py

Toaster at 20:48, 7 January 2011

2011-01-07T20:48:01Z

← Older revision		Revision as of 20:48, 7 January 2011
Line 6:		Line 6:

	=Request One Token=		=Request One Token=
	==Code==		===Code===
	<pre>		<pre>
	from suds.client import Client		from suds.client import Client
Line 21:		Line 21:

	Here's the result of running it:		Here's the result of running it:
	==Output==		===Output===
	<pre>		<pre>
	[python] [toaster@loach ace-cli]$ python test2.py		[python] [toaster@loach ace-cli]$ python test2.py

Toaster at 20:47, 7 January 2011

2011-01-07T20:47:45Z

← Older revision		Revision as of 20:47, 7 January 2011
Line 6:		Line 6:

	=Request One Token=		=Request One Token=
			==Code==
	<pre>		<pre>
	from suds.client import Client		from suds.client import Client
Line 20:		Line 21:

	Here's the result of running it:		Here's the result of running it:
			==Output==
	<pre>		<pre>
	[python] [toaster@loach ace-cli]$ python test2.py		[python] [toaster@loach ace-cli]$ python test2.py

Toaster at 20:46, 7 January 2011

2011-01-07T20:46:49Z

Show changes

Toaster at 19:55, 7 January 2011

2011-01-07T19:55:26Z

← Older revision		Revision as of 19:55, 7 January 2011
Line 1:		Line 1:
	Using the python suds library it's fairly trivial to request tokens from the ACE IMS service.		Using the python suds library it's fairly trivial to request tokens from the ACE IMS service.

	* https://fedorahosted.org/suds/ - suds library, examples ~~use~~ .4		* https://fedorahosted.org/suds/ - suds library, examples written for version 0.4

	Validating ace tokens is described in on the [[Ace:Validating_Witness_and_Tokens\|ims overview page]] and [[Ace:StorePython\|token store example]] page		Validating ace tokens is described in on the [[Ace:Validating_Witness_and_Tokens\|ims overview page]] and [[Ace:StorePython\|token store example]] page

Toaster: Ace:IMSPython Accessing the IMS using python moved to Ace:IMSPython

2011-01-07T19:55:04Z

Ace:IMSPython Accessing the IMS using python moved to Ace:IMSPython

← Older revision	Revision as of 19:55, 7 January 2011
(No difference)

Toaster at 19:54, 7 January 2011

2011-01-07T19:54:45Z

← Older revision		Revision as of 19:54, 7 January 2011
Line 146:		Line 146:

	=Complete Example=		=Complete Example=

			This example will read a file, compute its digest and request a token. It will then recompute the round hash using the

	<pre>		<pre>
Line 166:		Line 168:
	print filename, ' ', filedigest		print filename, ' ', filedigest


			print '\n---Token Response from IMS'
	request = client.factory.create('tokenRequest')		request = client.factory.create('tokenRequest')
	request.hashValue = filedigest		request.hashValue = filedigest
	request.name = filename		request.name = filename
	token = client.service.requestTokensImmediate('SHA-256-0',request)		token = client.service.requestTokensImmediate('SHA-256-0',request)

	~~print '\n---Token Generated'~~
	print 'Round:', token[0].roundId, ' Date:', token[0].timestamp		print 'Round:', token[0].roundId, ' Date:', token[0].timestamp
	print token[0].proofElements		print token[0].proofElements

	~~rounds = client.service.getRoundSummaries(token[0].roundId)~~
	~~print '\n---Requested Round Hash'~~
	~~print 'Round hash:', rounds[0].hashValue~~

	print '\n---Computing proof'		print '\n---Computing proof'
Line 187:		Line 186:
	hashAlg = hashlib.sha256()		hashAlg = hashlib.sha256()
	# create level by converting hashes to bytes and inserting		# create level by converting hashes to bytes and inserting
	# previous level where necessary		# previous level where necessary, first level uses file hash
	for strhash in element.hashes:		for strhash in element.hashes:
	if i == element.index:		if i == element.index:
Line 194:		Line 193:
	i = i + 1		i = i + 1

	# in case ~~index~~ is ~~last item~~		# in case previous level is to be inserted at end
	if i == element.index:		if i == element.index:
	hashAlg.update(prevhash)		hashAlg.update(prevhash)
Line 201:		Line 200:
	level = level + 1		level = level + 1

	print '\n---Comparing Round to ~~Proof~~'		print '\n---Requesting Round Hash for',token[0].roundId
			rounds = client.service.getRoundSummaries(token[0].roundId)
			print 'Round hash:', rounds[0].hashValue

			print '\n---Comparing Round Hash to computed proof hash'
	print rounds[0].hashValue		print rounds[0].hashValue
	print binascii.b2a_hex(prevhash)		print binascii.b2a_hex(prevhash)
Line 211:		Line 214:
	[python] [toaster@loach ace-cli]$ python test2.py		[python] [toaster@loach ace-cli]$ python test2.py
	---File to secure:		---File to secure:
	test2.py ~~8637a62b365b82ea32d98859d9383dd6e0ecae196821df7b432988d5284ab84e~~		test2.py 1f9bf12fc4e402d6cad8b36f9f6e0482af14add1b00f0f5aff2197309483a199

	---Token ~~Generated~~		---Token Response from IMS
	Round: ~~2895470~~ Date: 2011-01-07 14:46:46.~~000473~~		Round: 2895642 Date: 2011-01-07 14:54:21.000883
	[(proofElement){		[(proofElement){
	hashes[] =		hashes[] =
	"~~6e29363fd205cea2d07fd0e9319982f5b32322a9e9450b5520384df715282e1c~~",		"31ed6c99ea3932bd2cbc8db0e42fc7bd028a773ac7e2359785f55fe076a6492b",
	index = 0		index = 0
	}, (proofElement){		}, (proofElement){
	hashes[] =		hashes[] =
	"~~9941e51555f20cf2bcaa478ca91932734131a697bfad613c8a9c1c95b4b55ec3~~",		"be071a2271d0be7633e986c4463cbc3fc39e244d75948000c41583e78d0398e3",
	index = 0		index = 0
	}, (proofElement){		}, (proofElement){
	hashes[] =		hashes[] =
	"~~b7f7469e851ca4501e5941f99be9e8b883291404a53bdaf1848da317228cd4c2~~",		"2cb53579297ff25fa6492e6f9b4cc130acf379f1061e31d2e5fd65da734c0f91",
	index = 0		index = 0
	}, (proofElement){		}, (proofElement){
	hashes[] =		hashes[] =
	"~~aa0b940e1fb04caa3e54b89e78412424970066017ee1dc7eb31d733f43a98ebe~~",		"439e40fbeae4635d014091ed93324cd467c61a3848516ee99d2c0bb20e02e7cf",
	index = 1		index = 1
	}]		}]

	---~~Requested Round Hash~~		---Computing proof
	~~Round hash~~: ~~1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6~~		Level: 0 ( index: 0 ) f91649510d117b361d6023b8846f12f273de0e25fab257d94be774a77bd222c6
			Level: 1 ( index: 0 ) 1d56960d990765a1581559786df5e77dbdcf25e6c53b79f215375001ac761f88
			Level: 2 ( index: 0 ) 31473c279b3d0d4714b096fe59c0aaa2b36286cbf3e82dbc9afb73a988a33f3e
			Level: 3 ( index: 1 ) 1ccba7f2302c71615f20e5b5768a118fbf44781e40bd2d7e5479ddd11a46d44c

	---~~Computing proof~~		---Requesting Round Hash for 2895642
	~~Level~~: ~~0 ( index: 0 ) 2f109b4c0dd6f1210419755e6772c11a4bccd491bf2c36aa206d2ae98e8b5350~~		Round hash: 1ccba7f2302c71615f20e5b5768a118fbf44781e40bd2d7e5479ddd11a46d44c
	~~Level: 1 ( index: 0 ) 2be8b53ffe64f9ba9910f028cd2bd8b33e01e68d8904fa58998e0b7b5da72760~~
	~~Level: 2 ( index: 0 ) 494189c93ad5b55beaaa9760311840149ee1ae7cfd411e2d616d3073bcf3c04a~~
	~~Level: 3 ( index: 1 ) 1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6~~

	---Comparing Round to ~~Proof~~		---Comparing Round Hash to computed proof hash
	~~1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6~~		1ccba7f2302c71615f20e5b5768a118fbf44781e40bd2d7e5479ddd11a46d44c
	~~1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6~~		1ccba7f2302c71615f20e5b5768a118fbf44781e40bd2d7e5479ddd11a46d44c
	Equal: True		Equal: True
	</pre>		</pre>

Toaster at 19:49, 7 January 2011

2011-01-07T19:49:08Z

← Older revision		Revision as of 19:49, 7 January 2011
Line 146:		Line 146:

	=Complete Example=		=Complete Example=

			<pre>
			import hashlib
			import binascii
			from suds.client import Client

			filename='test2.py'

			digFile = open(filename,'rb')
			hashAlg = hashlib.sha256()
			hashAlg.update(digFile.read())
			binarydigest = hashAlg.digest()
			filedigest = binascii.b2a_hex(binarydigest)

			url='http://ims.umiacs.umd.edu:8080/ace-ims/IMSWebService?wsdl'
			client = Client(url)

			print '---File to secure:'
			print filename, ' ', filedigest

			request = client.factory.create('tokenRequest')
			request.hashValue = filedigest
			request.name = filename
			token = client.service.requestTokensImmediate('SHA-256-0',request)

			print '\n---Token Generated'
			print 'Round:', token[0].roundId, ' Date:', token[0].timestamp
			print token[0].proofElements

			rounds = client.service.getRoundSummaries(token[0].roundId)
			print '\n---Requested Round Hash'
			print 'Round hash:', rounds[0].hashValue

			print '\n---Computing proof'

			level = 0
			prevhash = binarydigest
			for element in token[0].proofElements:
			i = 0
			hashAlg = hashlib.sha256()
			# create level by converting hashes to bytes and inserting
			# previous level where necessary
			for strhash in element.hashes:
			if i == element.index:
			hashAlg.update(prevhash)
			hashAlg.update(binascii.a2b_hex(strhash))
			i = i + 1

			# in case index is last item
			if i == element.index:
			hashAlg.update(prevhash)
			prevhash = hashAlg.digest()
			print 'Level:',level, '( index:',element.index,') ', binascii.b2a_hex(prevhash)
			level = level + 1

			print '\n---Comparing Round to Proof'
			print rounds[0].hashValue
			print binascii.b2a_hex(prevhash)
			print 'Equal:',binascii.b2a_hex(prevhash) == rounds[0].hashValue
			</pre>

			And now the output:
			<pre>
			[python] [toaster@loach ace-cli]$ python test2.py
			---File to secure:
			test2.py 8637a62b365b82ea32d98859d9383dd6e0ecae196821df7b432988d5284ab84e

			---Token Generated
			Round: 2895470 Date: 2011-01-07 14:46:46.000473
			[(proofElement){
			hashes[] =
			"6e29363fd205cea2d07fd0e9319982f5b32322a9e9450b5520384df715282e1c",
			index = 0
			}, (proofElement){
			hashes[] =
			"9941e51555f20cf2bcaa478ca91932734131a697bfad613c8a9c1c95b4b55ec3",
			index = 0
			}, (proofElement){
			hashes[] =
			"b7f7469e851ca4501e5941f99be9e8b883291404a53bdaf1848da317228cd4c2",
			index = 0
			}, (proofElement){
			hashes[] =
			"aa0b940e1fb04caa3e54b89e78412424970066017ee1dc7eb31d733f43a98ebe",
			index = 1
			}]

			---Requested Round Hash
			Round hash: 1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6

			---Computing proof
			Level: 0 ( index: 0 ) 2f109b4c0dd6f1210419755e6772c11a4bccd491bf2c36aa206d2ae98e8b5350
			Level: 1 ( index: 0 ) 2be8b53ffe64f9ba9910f028cd2bd8b33e01e68d8904fa58998e0b7b5da72760
			Level: 2 ( index: 0 ) 494189c93ad5b55beaaa9760311840149ee1ae7cfd411e2d616d3073bcf3c04a
			Level: 3 ( index: 1 ) 1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6

			---Comparing Round to Proof
			1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6
			1a4a52a7ab22ce7298f39097743460fc995957c4222117c19a49f9812134daa6
			Equal: True
			</pre>