1 package File
::KDBX
::Dumper
::V3
;
2 # ABSTRACT: Dump KDBX3 files
7 use Crypt
::Digest
qw(digest_data);
9 use File
::KDBX
::Constants
qw(:header :compression);
10 use File
::KDBX
::Error
;
11 use File
::KDBX
::IO
::Crypt
;
12 use File
::KDBX
::IO
::HashBlock
;
13 use File
::KDBX
::Util
qw(:class :empty :load assert_64bit erase_scoped);
17 extends
'File::KDBX::Dumper';
19 our $VERSION = '999.999'; # VERSION
25 my $kdbx = $self->kdbx;
26 my $headers = $kdbx->headers;
29 # FIXME kinda janky - maybe add a "prepare" hook to massage the KDBX into the correct shape before we get
31 local $headers->{+HEADER_TRANSFORM_SEED
} = $kdbx->transform_seed;
32 local $headers->{+HEADER_TRANSFORM_ROUNDS
} = $kdbx->transform_rounds;
34 if (nonempty
(my $comment = $headers->{+HEADER_COMMENT
})) {
35 $buf .= $self->_write_header($fh, HEADER_COMMENT
, $comment);
39 HEADER_COMPRESSION_FLAGS
,
41 HEADER_TRANSFORM_SEED
,
42 HEADER_TRANSFORM_ROUNDS
,
44 HEADER_INNER_RANDOM_STREAM_KEY
,
45 HEADER_STREAM_START_BYTES
,
46 HEADER_INNER_RANDOM_STREAM_ID
,
48 defined $headers->{$type} or throw
"Missing value for required header: $type", type
=> $type;
49 $buf .= $self->_write_header($fh, $type, $headers->{$type});
51 $buf .= $self->_write_header($fh, HEADER_END
);
60 my $val = shift // '';
62 $type = to_header_constant
($type);
63 if ($type == HEADER_END
) {
66 elsif ($type == HEADER_COMMENT
) {
67 $val = encode
('UTF-8', $val);
69 elsif ($type == HEADER_CIPHER_ID
) {
70 my $size = length($val);
71 $size == 16 or throw
'Invalid cipher UUID length', got
=> $size, expected
=> $size;
73 elsif ($type == HEADER_COMPRESSION_FLAGS
) {
74 $val = pack('L<', $val);
76 elsif ($type == HEADER_MASTER_SEED
) {
77 my $size = length($val);
78 $size == 32 or throw
'Invalid master seed length', got
=> $size, expected
=> $size;
80 elsif ($type == HEADER_TRANSFORM_SEED
) {
83 elsif ($type == HEADER_TRANSFORM_ROUNDS
) {
85 $val = pack('Q<', $val);
87 elsif ($type == HEADER_ENCRYPTION_IV
) {
90 elsif ($type == HEADER_INNER_RANDOM_STREAM_KEY
) {
93 elsif ($type == HEADER_STREAM_START_BYTES
) {
96 elsif ($type == HEADER_INNER_RANDOM_STREAM_ID
) {
97 $val = pack('L<', $val);
99 elsif ($type == HEADER_KDF_PARAMETERS
||
100 $type == HEADER_PUBLIC_CUSTOM_DATA
) {
101 throw
"Unexpected KDBX4 header: $type", type
=> $type;
103 elsif ($type == HEADER_COMMENT
) {
104 throw
"Unexpected KDB header: $type", type
=> $type;
107 alert
"Unknown header: $type", type
=> $type;
110 my $size = length($val);
111 my $buf = pack('C S<', 0+$type, $size);
113 $fh->print($buf, $val) or throw
'Failed to write header';
122 my $header_data = shift;
123 my $kdbx = $self->kdbx;
125 # assert all required headers present
128 HEADER_ENCRYPTION_IV
,
130 HEADER_INNER_RANDOM_STREAM_KEY
,
131 HEADER_STREAM_START_BYTES
,
133 defined $kdbx->headers->{$field} or throw
"Missing $field";
136 my $master_seed = $kdbx->headers->{+HEADER_MASTER_SEED
};
139 $key = $kdbx->composite_key($key);
141 my $response = $key->challenge($master_seed);
142 push @cleanup, erase_scoped
$response;
144 my $transformed_key = $kdbx->kdf->transform($key);
145 push @cleanup, erase_scoped
$transformed_key;
147 my $final_key = digest_data
('SHA256', $master_seed, $response, $transformed_key);
148 push @cleanup, erase_scoped
$final_key;
150 my $cipher = $kdbx->cipher(key
=> $final_key);
151 $fh = File
::KDBX
::IO
::Crypt-
>new($fh, cipher
=> $cipher);
153 $fh->print($kdbx->headers->{+HEADER_STREAM_START_BYTES
})
154 or throw
'Failed to write start bytes';
159 $fh = File
::KDBX
::IO
::HashBlock-
>new($fh);
161 my $compress = $kdbx->headers->{+HEADER_COMPRESSION_FLAGS
};
162 if ($compress == COMPRESSION_GZIP
) {
163 load_optional
('IO::Compress::Gzip');
164 $fh = IO
::Compress
::Gzip-
>new($fh,
165 -Level
=> IO
::Compress
::Gzip
::Z_BEST_COMPRESSION
(),
167 ) or throw
"Failed to initialize compression library: $IO::Compress::Gzip::GzipError",
168 error
=> $IO::Compress
::Gzip
::GzipError
;
170 elsif ($compress != COMPRESSION_NONE
) {
171 throw
"Unsupported compression ($compress)\n", compression_flags
=> $compress;
174 my $header_hash = digest_data
('SHA256', $header_data);
175 $self->_write_inner_body($fh, $header_hash);