integrity_checker.cpp

#include "shieldcore/integrity_checker.hpp"

#include "shieldcore/crypto_utils.hpp"

#if defined(_WIN32)
#include <windows.h>
#else
#include <unistd.h>
#endif

#include <filesystem>

namespace shieldcore {

bool computeFileSha256Hex(const std::filesystem::path& path, std::string& outHex, std::string& error) {
  ByteBuffer bytes;
  if (!readFileBytes(path, bytes, error)) {
    return false;
  }

  outHex = sha256Hex(bytes);
  return true;
}

bool verifyHostIntegrity(const std::filesystem::path& executablePath,
                         const std::string& expectedHex,
                         std::string& error) {
  if (expectedHex.empty()) {
    return true;
  }

  std::string actualHex;
  if (!computeFileSha256Hex(executablePath, actualHex, error)) {
    return false;
  }

  if (actualHex != expectedHex) {
    error = "host integrity check failed";
    return false;
  }

  return true;
}

}  // namespace shieldcore