Add authenticated WiFi transport with BLE fallback

核桃派软件源代码/app/mobile/protocol.py

@@ -134,7 +134,8 @@ class Handshake:
 
 
 class Cipher:
-    def __init__(self, material: bytes, transcript: bytes, *, server: bool):
+    def __init__(self, material: bytes, transcript: bytes, *, server: bool, label=LABEL):
+        self.label = label
         self.tx_direction = 1 if server else 0
         self.rx_direction = 1 - self.tx_direction
         self.keys = (AESGCM(material[:32]), AESGCM(material[32:64]))
@@ -148,7 +149,7 @@ class Cipher:
             raise ProtocolError("BAD_REQUEST")
         seq = struct.pack("!Q", self.tx_sequence)
         d = self.tx_direction
-        result = seq + self.keys[d].encrypt(self.prefixes[d] + seq, payload, LABEL + self.transcript + bytes([d]) + seq)
+        result = seq + self.keys[d].encrypt(self.prefixes[d] + seq, payload, self.label + self.transcript + bytes([d]) + seq)
         self.tx_sequence += 1
         return result
 
@@ -157,7 +158,7 @@ class Cipher:
             if self.failed or not 25 <= len(record) <= MAX_MESSAGE or int.from_bytes(record[:8], "big") != self.rx_sequence:
                 raise ValueError()
             seq, d = record[:8], self.rx_direction
-            result = self.keys[d].decrypt(self.prefixes[d] + seq, record[8:], LABEL + self.transcript + bytes([d]) + seq)
+            result = self.keys[d].decrypt(self.prefixes[d] + seq, record[8:], self.label + self.transcript + bytes([d]) + seq)
             self.rx_sequence += 1
             return result
         except Exception: