Skip to content

Latest commit

 

History

History
447 lines (355 loc) · 24 KB

CONTRIBUTING.md

File metadata and controls

447 lines (355 loc) · 24 KB
Raw

Developing a Channel

The following tutorials describe the process of C3 channel development in a step by step matter, along with detailed explanations and best practices. This section will demonstrate how to create a channel that utilizes regular files for communication.

Basic Tutorial

This tutorial focuses only on a bare minimum effort required to develop a C3 Channel. First, open the C3 solution file in MS Visual Studio and add a new *.cpp file to the “Common” project. The Preferred location is: “Src/Common/FSecure/C3/Interfaces/Channels” or its sub folder.

C3

Next, open the newly created file and enter a type that will represent the Channel. An example for a channel named MyChannel is as follows:

#include "StdAfx.h"
#include <fstream>

namespace FSecure::C3::Interfaces::Channels
{
    class MyChannel : public FSecure::C3::Interfaces::Channel<MyChannel>
    {
    public:
        MyChannel(FSecure::ByteView bv) : m_Filename("MyChannelFile")
        {
        }

        size_t OnSendToChannel(FSecure::ByteView packet)
        {
            // Create/open binary file with m_Filename
            std::ofstream file(m_Filename, std::ios::binary);

            // Write packet to file
            file << std::string_view{ packet };

            return packet.length();
        }

        FSecure::ByteVector OnReceiveFromChannel()
        {
            // Open binary file with m_Filename
            std::ifstream file{ m_Filename, std::ios::binary };

            // read packet from file
            return FSecure::ByteVector{ std::istreambuf_iterator<char>{file}, {} };
        }

    private:
        std::string m_Filename;
    };
}

A breakdown of this code is as such:

  • The first line is required by Visual Studio for projects using precompiled headers.
  • Channels must be defined in Something::Interfaces::Channels namespace.
  • The MyChannel class definition publicly inherits from a CRTP type called Channel<>, which is required by the C3 framework in order to register the Channel.
  • Next there are three required methods – OnSendToChannel, OnReceiveFromChannel and a constructor that takes one FSecure::ByteView argument. These methods are used to bind the channel’s functionality with the C3 framework.
  • For this basic tutorial the argument for the MyChannel constructor is ignored. Instead the file name member variable is initialised with a hardcoded value.
  • OnSendToChannel's implementation simply takes its parameter (packet) and writes it to the file.
  • OnReceiveFromChannel reads from the file and returns the buffer.

With this file added, the solution can be recompiled. Running ChannelLinter with -l switch should now include MyChannel

C:\Users\user\C3\Bin>ChannelLinter_d64.exe -l
Custom Command and Control - Channel linter. BUILD: C3-1.0.manual-build
Registered channels:
MyChannel
Slack
UncShareFile

and can be tested with -i switch: (-a "" is used to pass a empty ByteView to MyChannel's constructor)

C:\Users\user\C3\Bin>ChannelLinter_d64.exe -n MyChannel -a "" -i
Custom Command and Control - Channel linter. BUILD: C3-1.0.manual-build
Channel: MyChannel
[Warning] create property does not exist, generating default one.
Parsing create arguments ... OK
Parsing command definitions ... OK
Registered commands:
id      name
65534   Set UpdateDelayJitter
65535   Close
MyChannel's Capability json verified OK.
Creating channel ... OK
Creating complementary channel ... OK
Testing channel with 8 bytes of data ... OK
Testing channel with 64 bytes of data ... OK
Testing channel with 1024 bytes of data ... OK
Testing channel with 1048576 bytes of data ... OK

Re-starting the C3 web application and gateway is all that is required after compilation to use the newly created channel.

C3

However this implementation has some limitations, critical for usage in C3:

  • It doesn't synchronize reads and writes to the file across processes.
  • It doesn't implement any mechanism that would prevent a channel to overwrite a packet that hasn't been read.
  • It doesn't clear the packet buffer (file) once it's read, so the same packet can be received multiple times.

For a complete implementation of a channel via files see UncShareFile channel which addresses those problems by using .lock files and not reusing the same file, but introducing a notion of packet direction and randomizing part of a file name.

Advanced Tutorial

This tutorial will cover more advanced features that can allow developers to create complex channels with a rich feature set. This will be demonstrated by extending the previously written file channel. This section will cover:

  • How to define input parameters, allowing users to provide dynamic file names from the UI.
  • How to add a custom command.
  • How to use Log functionality and the built-in string obfuscator.
  • How to set a channel’s initial Update Delay Jitter values.
  • How to perform refactoring, ensuring developers keep to code standards.
  • Discuss requirements of overridden methods and other implementation details.

Adding a Channel’s Create Arguments

The previously created Channel from the Basic tutorial has a flaw in its implementation – the file name is hard-coded. This not only prevents it from being reused multiple times in a single C3 network, but also disables some useful features. For example, this flaw prevents the channel from being used as a Negotiation Channel. Additionally, as C3 has no way of knowing the creation parameters of MyChannel, it will default them to a single binary blob of data:

C3

The UI can be made to explicitly ask for each parameter and validate their values in a few steps. First, a single filename m_Filename is replaced by a pair of files m_InFile and m_OutFile, used to read and write data respectively. The two variables allow for two identifiers to be assigned for every MyChannel instance. Whilst not strictly required, this design decision adds a number of benefits.

Before we proceed with implementation, it is important to understand what a Double-ID design is and how it operates. The core concept is to address two communicating interfaces with a unique pair of IDs – as opposed to using one identifier for the pair.

As an example, consider a file system Channel implementation and the various ways communication could be designed:

  • Model 1 - share a file for each pair of C3 Channels.
  • Model 2 - assign a pair of files for each pair of Interfaces.
  • Model 3 - use a single file (shared by everyone), then assign each party an ID, and precede each packet with two related IDs (e.g. AB if Interface A is talking to Interface B, CA if C is sending a packet to A, etc.).
  • Model 4 - use a single file then assign each party two unique IDs (inbound and outbound) and precede each packet with that ID.

All implementations are valid and will work with the C3 Framework, but some features won’t be available for Model 1. The figure below provides a visualisation of sample incompatible and compatible channel designs.

C3

As can be seen on the bottom diagram (compatible version), “Ch1” Interface’s output ID is the same as “Ch2” Interface’s input ID, and vice versa. The same goes for “Ch2” and “Ch3” pair. This diagram will now be applied to MyChannel – every MyChannel instance will get an input ID and an output ID assigned to them.

To begin, the definition of the static const char* GetCapability() method provides a JSON representation of MyChannel's capabilities:

static const char* GetCapability()
{
    return R"(
      {
        "create": {
            "arguments": [
                [
                    {
                        "type": "string",
                        "name": "Input ID",
                        "min": 4,
                        "randomize": true,
                        "description": "Used to distinguish packets for the channel"
                    },
                    {
                        "type": "string",
                        "name": "Output ID",
                        "min": 4,
                        "randomize": true,
                        "description": "Used to distinguish packets from the channel"
                    }
                ]
            ]
        }
      }
)";
}

This optional method needs to return a JSON string that contains customisation details of the channel. In this instance, the JSON informs C3 what kind of arguments the channel needs in order to be created (by defining the "arguments" array within the "create" object).

There are 2 parameters defined, both need to be at least 4 characters long and random values should be assigned to them when the channel creation dialog appears in the UI (this also enables the randomise button next to the argument’s field). Both parameters are of type string. Other types supported by C3 include: int8, int16, int32, int64, uint8, uint16, uint32, uint64, float, boolean, binary and ip (IP address). The name field is used to label the argument in the UI and the description is rendered when a user hovers their mouse cursor over the field’s help icon. There are two other properties that haven’t been specified here: max and defaultValue. As their names might suggest, they define the maximum length of a string argument (or the maximal value of an arithmetic argument) and its default value.

Note: Using "randomize": true requires the channel to explicitly specify the min value.

Note: The use of an array for Input and Output ID is important. This tells C3 that the arguments are identifiers and should be swapped for complementary channels (channel’s 1 Input = channel’s 2 Output and vice versa). Developers should avoid the use of an array for other arguments they choose to define for a channel.

The next step in this tutorial involves updating MyChannel’s constructor to read the new arguments:

MyChannel(FSecure::ByteView bv)
  : m_InFile(bv.Read<std::string>())
  , m_OutFile(bv.Read<std::string>())
{
}

Note: It is up to Channel’s developer to ensure that the type parsed in Read is the same type as the one declared in the JSON returned by GetCapability (e.g. "type" : "int16" should be parsed later as args.Read<int16_t>()).

Note: The Read method “moves” ByteView according to the length of data that was read and allows for multiple parameters to be read at once (e.g. auto[integer, text, real] = args.Read<int8_t, std::string, float>()).

Note: std::string and FSecure::ByteVector types are stored in a buffer in a way that keeps track of their length (by preceding them with 4 byte-long size).

Note: Arithmetic types are always stored in the little-endian byte order.

As in the basic tutorial, compile the whole C3 solution, go to the root folder of C3 and run the StartWebController.cmd script. The channel creation command window in the Web UI should now look as such:

C3

Because this channel uses the Double-ID design, additional features of C3 will be unlocked. Firstly, a new command will be provided in the user interface that can be used to create a Negotiation channel:

C3

Secondly, C3 will add the “Connect Relay” option to all instances of MyChannel, which automatically attaches a complementary MyChannel instance (fills in swapped Input and Output identifiers) for a selected Relay:

C3 C3

Finally, C3 will add the “New Relay” option for all existing MyChannels, which creates a new Relay payload with a complementary initial Channel:

C3 C3

Creating a Custom Command

Every Interface provides two built-in Commands: Close and UpdateDelayJitter. However, channel developers are able to add their own custom Commands, by enlisting them in the static GetCapability() method:

static const char* GetCapability()
{
    return R"({
        "commands":
            [
                {
                    "name" : "Test Command",
                    "description" : "Logs provided text.",
                    "id" : 0,
                    "arguments" :
                        [
                        {
                            "type" : "string",
                            "name" : "Message",
                            "description" : "Message to Log."
                        }
                        ]
                 }
            ]
        })";
}

The JSON buffer that GetCapability returns defines one Command labeled “Test Command”, which takes one string argument. The "id" field (specified as equal to 0) is needed to distinguish between custom Commands, and is required to be in the range 0 – 32767.

In MyChannel, an overridden implementation of OnRunCommand is defined:

ByteVector OnRunCommand(ByteView command) override
{
    auto commandCopy = command;
        switch (command.Read<uint16_t>())
        {
            case 0:
                return TestCommand(command);
            default:
                return AbstractChannel::OnRunCommand(commandCopy);
        }
}

This method simply parses the first two bytes of the Command buffer as the Command ID. If its value is different than all Command IDs that have been registered then the base class’ OnRunCommand method is called – to ensure handling of internal Commands remains intact. Therefore, if the Command ID is 0, the TestCommand method will be called by MyChannel.

ByteVector TestCommand(ByteView args)
{
    Log({ OBF("Custom Command : ") + args.Read<std::string>(), LogMessage::Severity::DebugInformation });
    return {};
}

The TestCommand method adds a debug text entry to C3’s Log. DebugInformation is used which is rendered in a Relay’s console window only when compiled in debug mode. The message consists of two elements: a hard-coded text "Custom Command : " and a string that is provided by a user in the UI. Note the use of the OBF macro, this is used to encrypt strings at compile-time, which are decrypted at run-time only when required. Also of note is that the TestCommand handler returns an empty FSecure::ByteVector as there’s nothing to send back to the Gateway.

Note: The GetCapability method is compiled only when building Gateway’s executable and therefore it’s not required to use the OBF macro to obfuscate its strings.

After rebuilding the solution once again and launching C3 the Test Command becomes available in MyChannel’s Command Center:

C3 C3

Note: C3 can be launched in a debug mode by running dotnet run -c Debug console command from the Src/WebController/Backend location. Debug mode enables Node Relay’s console window, allowing to read their local C3 Log.

Putting it all Together

After developing a functionally working channel, the next stage is to refactor the code. The MyChannel type is still quite small, but for larger classes it’s common to split the implementation between a header and a compilation unit file. For MyChannel this involves adding a new MyChannel.h file in the same location as MyChannel.cpp. This also involves embracing the channel with the appropriate namespace declaration - FSecure::C3::Interfaces::Channels. Finally, doxygen-style documentation is added to improve readability. MyChannel.h is then as such:

#pragma once

namespace FSecure::C3::Interfaces::Channels
{
    /// Implementation of a File Channel.
    class MyChannel : public FSecure::C3::Interfaces::Channel<MyChannel>
    {
    public:
        /// Public constructor.
        /// @param arguments factory arguments.
        MyChannel(FSecure::ByteView arguments);

        /// OnSend callback implementation. Called every time attached Relay wants to send a packet through this Channel Device. @see Device::OnSendToChannelInternal.
        /// @param packet data to send through the Channel.
        /// @return number of bytes successfully sent through the Channel. One call does not have to send all data. In that case chunking will take place, Chunks must be at least 64 bytes or equal to packet.size() to be accepted,
        size_t OnSendToChannel(FSecure::ByteView packet);

        /// Reads a single C3 packet from Channel. Periodically called by attached Relay. Implementation should read the data (or return an empty buffer if there's nothing in the Channel waiting to read) and leave as soon as possible.
        /// @return ByteVector that contains a single packet retrieved from Channel.
        FSecure::ByteVector OnReceiveFromChannel();

        /// Processes Commands addressed to this Channel.
        /// @param command a buffer containing whole command and it's parameters.
        /// @return command result.
        ByteVector OnRunCommand(ByteView command) override;

        /// Example Command handler. It must be registered/described in GetCapability. @see MyChannel::OnRunCommand.
        /// @param args Command's arguments.
        /// @returns ByteVector Command result.
        ByteVector TestCommand(ByteView args);

        /// Describes Channels creation parameters and custom Commands.
        /// @return Channel's capability description in JSON format.
        static const char* GetCapability();

        /// Explicit values used as the defaults for Channel's UpdateDelayJitter. Values can be changed later, at runtime.
        constexpr static std::chrono::milliseconds s_MinUpdateDelay = 1000ms, s_MaxUpdateDelay = 1000ms;

    private:
        /// Name of file used to receive data.
        std::string m_InFile;

        /// Name of file used to send data.
        std::string m_OutFile;
    };
}

And the implementation within MyChannel.cpp:

#include "StdAfx.h"
#include "MyChannel.h"
#include <fstream>
#include <filesystem>

namespace FSecure::C3::Interfaces::Channels
{
    MyChannel::MyChannel(FSecure::ByteView bv)
        : m_InFile(bv.Read<std::string>())
        , m_OutFile(bv.Read<std::string>())
    {
    }

    size_t MyChannel::OnSendToChannel(FSecure::ByteView packet)
    {
        // Create/open binary file with m_OutFile name.
        std::ofstream file(m_OutFile, std::ios::binary);

        // Write packet to file
        file << std::string_view{ packet };

        return packet.length();
    }

    FSecure::ByteVector MyChannel::OnReceiveFromChannel()
    {
        // Open binary file with m_InFile name.
        std::ifstream file{ m_InFile, std::ios::binary };
        // read packet from file
        auto packet = FSecure::ByteVector{ std::istreambuf_iterator<char>{file}, {} };
        file.close();
        std::filesystem::remove(m_OutFile);
        return packet;
    }

    ByteVector MyChannel::OnRunCommand(ByteView command)
    {
        auto commandCopy = command;
        switch (command.Read<uint16_t>())
        {
        case 0:
            return TestCommand(command);
        default:
            return AbstractChannel::OnRunCommand(commandCopy);
        }
    }

    ByteVector MyChannel::TestCommand(ByteView args)
    {
        Log({ OBF("Custom Command : ") + args.Read<std::string>(), LogMessage::Severity::DebugInformation });
        return {};
    }

    const char* MyChannel::GetCapability()
    {
        return R"(
            {
                "create": {
                    "arguments": [
                        [
                            {
                                "type": "string",
                                "name": "Input ID",
                                "min": 4,
                                "randomize": true,
                                "description": "Used to distinguish packets for the channel"
                            },
                            {
                                "type": "string",
                                "name": "Output ID",
                                "min": 4,
                                "randomize": true,
                                "description": "Used to distinguish packets from the channel"
                            }
                        ]
                    ]
                },
                "commands": [
                    {
                        "name": "Test Command",
                        "description": "Logs provided text.",
                        "id": 0,
                        "arguments": [
                            {
                                "type": "string",
                                "name": "Message",
                                "description": "Message to Log."
                            }
                        ]
                    }
                ]
            }
        )";
    }
}

There are two new elements in the header file that have not previously been discussed - s_MinUpdateDelay and s_MaxUpdateDelay. All C3 Interfaces are updated periodically with some jitter. This is called the Update Delay Jitter and is specified by setting two range values in the UI – minimal and maximal. If both values are the same, then Update Delay Jitter is constant. If they differ, each delay is randomised in the range specified by min and max. Default (initial) Update Delay Jitter is equal to 30ms. If an interface needs to specify a different initial value, then it should set it by defining s_MinUpdateDelay and s_MaxUpdateDelay public constexpr static members – as demonstrated above. Update Delay Jitter can be changed at run-time with an Interface’s Commands.

Note: When using third-party APIs for Command and Control (such as Slack), the values set in s_MinUpdateDelay and s_MaxUpdateDelay directly contribute to avoiding heavy rate limiting.

Channel Development Summary

The tutorials provided here have discussed all the elements required to develop a channel in C3. MyChannel was intended to be as simple as possible in order to focus on C3 specifics. Channels can often be far more complicated and require longer implementations of OnReceiveFromChannel and OnSendToChannel methods. As such, the following details should be considered:

  • OnReceiveFromChannel is called periodically, while OnSendToChannel is called only if there’s something to send through the Channel. Bear in mind that calls to both methods could be made at the same time from two different threads. Implement appropriate synchronization mechanisms if they share any non-atomic objects.
  • OnSendToChannel returns the number of bytes successfully sent to the channel. If it’s less than the size of the provided packet, but more than 63, automatic chunking kicks in. If a channel sends less than 64 bytes, C3 will attempt to resend the packet and therefore call OnSendToChannel with the same buffer again, while the complementary Channel automatically rejects the packet. It follows from the above that it is necessary for every C3 Channel to be able to send chunks of size 64 bytes and more. For Channels that fail to meet this requirement, C3 will be stuck useless. This "magic" value of 64 is called C3 Minimal MTU.
  • OnReceiveFromChannel can have one of two signatures:
    • FSecure::ByteVector OnReceiveFromChannel(); if it can retrieve only one packet at a time.
    • std::vector<FSecure::ByteVector> OnReceiveFromChannel(); if it can retrieve multiple packets at a time (eg. a whole page of messages in a single HTTP request) In case there is nothing to read Channel should return an empty container.
  • Both methods should perform the minimal number of operations and leave as soon as possible. There is a possibility to add single-threaded Relays to C3 in the future, which means that only one thread of execution will be shared between all interfaces and all their methods. Bear in mind that one stalling Channel will block the whole Relay, until this method returns. That’s why if a Channel’s methods (especially updates - OnReceiveFromChannel) require more time to execute, the implementation should be split into smaller pieces, Update Delay Jitter should be increased, and those pieces invoked in an interlaced manner.