Skip to content

Include extra CloudKit fields in TLK share signature checks - #34

Open
thesacredmoocow wants to merge 1 commit into
OpenBubbles:masterfrom
thesacredmoocow:fix/tlkshare-extra-fields-signature
Open

Include extra CloudKit fields in TLK share signature checks#34
thesacredmoocow wants to merge 1 commit into
OpenBubbles:masterfrom
thesacredmoocow:fix/tlkshare-extra-fields-signature

Conversation

@thesacredmoocow

Copy link
Copy Markdown

Summary

  • Include extra CloudKit fields (notably tlkOwnershipProof) when verifying Manatee tlkshare signatures, matching Apple's CKKSTLKShare dataForSigning:.
  • Skip a bad share and keep trying others instead of aborting the whole unwrap when one signature fails.
  • This is verify-only. Share upload signing and the fetch-shares request are unchanged.

Test plan

  • Sign in with an iCloud account that has Messages in iCloud enabled
  • Confirm Manatee TLK shares unwrap without Signature verification failed
  • Confirm iCloud Messages history sync proceeds past encryption-config fetch
  • Confirm outgoing iCloud / share-upload traffic is unchanged

Apple now appends fields such as tlkOwnershipProof to CKKSTLKShare
dataForSigning. Verifying only the original fields fails Manatee unwrap
and blocks iCloud Messages sync.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant