HyperionOS/Src/Hyperion-kernel/lib/modules/Hyperion/40_auth.kmod

--:Minify:--
local kernel = ...
local auth = {}
kernel.auth = auth

-- @SPSF work here

-- needed

-- login           -- sets the current proccess to the specifyed user id
-- setPassword     -- sets the password for specifiyed user id
-- setUsername     -- sets 
-- newUser         -- sets 

-- PASSWD FILE FORMAT
-- uid:gid:username:homedir:shell

-- SHADOW FILE FORMAT
-- uid:salt:hash

local function getFile(path)
    local file = kernel.vfs.open(path, "r")
    if not file then error("Failed to open file: "..path) end
    local content = kernel.vfs.read(file, 1024000)
    kernel.vfs.close(file)
    return content
end

local blake2s
do
    local MOD32 = 2^32
    local function norm(x)
        return x % MOD32
    end

    local function tobits(x)
        x = norm(x)
        local t = {}
        for i = 0, 31 do
            local b = x % 2
            t[i] = b
            x = (x - b) / 2
        end
        return t
    end

    local function frombits(t)
        local x = 0
        local p = 1
        for i = 0, 31 do
            if t[i] == 1 then
                x = x + p
            end
            p = p * 2
        end
        return norm(x)
    end

    local function bor(...)
        local args = {...}
        if #args == 0 then return 0 end
        local bits = tobits(args[1])
        for i = 2, #args do
            local b = tobits(args[i])
            for j = 0, 31 do
                bits[j] = (bits[j] == 1 or b[j] == 1) and 1 or 0
            end
        end
        return frombits(bits)
    end

    local function bxor(...)
        local args = {...}
        if #args == 0 then return 0 end
        local bits = tobits(args[1])
        for i = 2, #args do
            local b = tobits(args[i])
            for j = 0, 31 do
                bits[j] = (bits[j] ~= b[j]) and 1 or 0
            end
        end
        return frombits(bits)
    end

    local function lshift(x, n)
        return norm(norm(x) * 2^n)
    end

    local function rshift(x, n)
        return math.floor(norm(x) / 2^n)
    end

    local function rotr(x, n)
        return bor(rshift(x, n), lshift(x, 32 - n))
    end

    local IV = {
        0x6A09E667, 0xBB67AE85, 0x3C6EF372, 0xA54FF53A,
        0x510E527F, 0x9B05688C, 0x1F83D9AB, 0x5BE0CD19
    }

    local SIGMA = {
        {0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15},
        {14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3},
        {11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4},
        {7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8},
        {9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13},
        {2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9},
        {12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11},
        {13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10},
        {6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5},
        {10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0}
    }

    local function G(v, a, b, c, d, x, y)
        v[a] = (v[a] + v[b] + x) % MOD32
        v[d] = rotr(bxor(v[d], v[a]), 16)
        v[c] = (v[c] + v[d]) % MOD32
        v[b] = rotr(bxor(v[b], v[c]), 12)
        v[a] = (v[a] + v[b] + y) % MOD32
        v[d] = rotr(bxor(v[d], v[a]), 8)
        v[c] = (v[c] + v[d]) % MOD32
        v[b] = rotr(bxor(v[b], v[c]), 7)
    end

    local function compress(h, block, t, last)
        local v = {}
        for i = 1, 8 do v[i] = h[i] end
        for i = 1, 8 do v[i + 8] = IV[i] end

        v[13] = bxor(v[13], t)
        if last then
            v[15] = bxor(v[15], 0xFFFFFFFF)
        end

        local m = {}
        for i = 0, 15 do
            local p = i * 4 + 1
            m[i] =
                (block:byte(p) or 0) +
                ((block:byte(p + 1) or 0) * 0x100) +
                ((block:byte(p + 2) or 0) * 0x10000) +
                ((block:byte(p + 3) or 0) * 0x1000000)
        end

        for r = 1, 10 do
            local s = SIGMA[r]
            G(v,1,5,9,13,  m[s[1]],  m[s[2]])
            G(v,2,6,10,14, m[s[3]],  m[s[4]])
            G(v,3,7,11,15, m[s[5]],  m[s[6]])
            G(v,4,8,12,16, m[s[7]],  m[s[8]])
            G(v,1,6,11,16, m[s[9]],  m[s[10]])
            G(v,2,7,12,13, m[s[11]], m[s[12]])
            G(v,3,8,9,14,  m[s[13]], m[s[14]])
            G(v,4,5,10,15, m[s[15]], m[s[16]])
        end

        for i = 1, 8 do
            h[i] = bxor(h[i], v[i], v[i + 8])
        end
    end

    function blake2s(msg, key)
        key = key or ""

        local h = {}
        for i = 1, 8 do h[i] = IV[i] end

        local outlen = 32 -- bytes
        h[1] = bxor(
            h[1],
            0x01010000 + lshift(#key, 8) + outlen
        )

        local t = 0

        if #key > 0 then
            local block = key .. string.rep("\0", 64 - #key)
            t = #key
            compress(h, block, t, false)
        end

        for i = 1, #msg, 64 do
            local block = msg:sub(i, i + 63)
            if #block < 64 then
                block = block .. string.rep("\0", 64 - #block)
            end
            t = t + math.min(64, #msg - i + 1)
            compress(h, block, t, i + 64 > #msg)
        end

        local out = ""
        for i = 1, 8 do
            out = out .. string.format("%08x", h[i])
        end
        return out
    end
end

if not blake2s then error("Failed to load blake2s") end

if not kernel.vfs.exists("/etc/pam.d/secret") then
    kernel.log("PAM SECRET REGENERATING PLEASE USE ROOT")
    local key = ""
    for i=1, 256 do
        key=key..string.char(math.random(0,255))
    end
    local handle = kernel.vfs.open("/etc/pam.d/secret", "w")
    kernel.vfs.write(handle, key)
    kernel.vfs.close(handle)
end

local pepper = getFile("/etc/pam.d/secret")
local passwdFile = getFile("/etc/passwd")
local shadowFile = getFile("/etc/shadow")
local passwdLines = string.split(passwdFile,"\n")
local shadowLines = string.split(shadowFile,"\n")
local passwd,shadow={},{}

for _,v in ipairs(passwdLines) do
    passwd[#passwd+1]=string.split(v,":")
end

for _,v in ipairs(shadowLines) do
    shadow[#shadow+1]=string.split(v,":")
end

for i,v in pairs(passwd) do
    kernel.users[tonumber(v[1])]=v[3]
end
kernel.passwd=passwd