2019-01-26 15:40:58 +00:00
|
|
|
#include <crypto/crypto_libsodium.hpp>
|
2018-10-23 12:57:57 +00:00
|
|
|
#include <sodium/crypto_generichash.h>
|
|
|
|
#include <sodium/crypto_sign.h>
|
|
|
|
#include <sodium/crypto_scalarmult.h>
|
2018-07-27 02:34:09 +00:00
|
|
|
#include <sodium/crypto_stream_xchacha20.h>
|
2019-01-10 19:41:51 +00:00
|
|
|
#include <util/mem.hpp>
|
|
|
|
|
2019-07-30 23:42:13 +00:00
|
|
|
#include <cassert>
|
2017-10-03 19:14:46 +00:00
|
|
|
|
2018-10-23 12:57:57 +00:00
|
|
|
extern "C"
|
|
|
|
{
|
|
|
|
extern int
|
|
|
|
sodium_init(void);
|
|
|
|
}
|
|
|
|
|
2018-05-22 15:54:19 +00:00
|
|
|
namespace llarp
|
|
|
|
{
|
|
|
|
namespace sodium
|
|
|
|
{
|
|
|
|
static bool
|
2019-01-02 01:04:03 +00:00
|
|
|
dh(llarp::SharedSecret &out, const PubKey &client_pk,
|
2019-01-02 01:04:04 +00:00
|
|
|
const PubKey &server_pk, const uint8_t *themPub, const SecretKey &usSec)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2018-06-12 11:57:14 +00:00
|
|
|
llarp::SharedSecret shared;
|
2018-05-22 15:54:19 +00:00
|
|
|
crypto_generichash_state h;
|
2018-05-23 20:37:43 +00:00
|
|
|
|
2019-01-02 01:04:08 +00:00
|
|
|
if(crypto_scalarmult_curve25519(shared.data(), usSec.data(), themPub))
|
2019-01-26 15:40:58 +00:00
|
|
|
{
|
2018-05-22 15:54:19 +00:00
|
|
|
return false;
|
2019-01-26 15:40:58 +00:00
|
|
|
}
|
2019-01-13 16:30:07 +00:00
|
|
|
crypto_generichash_blake2b_init(&h, nullptr, 0U, shared.size());
|
2019-01-02 01:04:04 +00:00
|
|
|
crypto_generichash_blake2b_update(&h, client_pk.data(), 32);
|
|
|
|
crypto_generichash_blake2b_update(&h, server_pk.data(), 32);
|
|
|
|
crypto_generichash_blake2b_update(&h, shared.data(), 32);
|
2019-01-13 16:30:07 +00:00
|
|
|
crypto_generichash_blake2b_final(&h, out.data(), shared.size());
|
2018-05-22 15:54:19 +00:00
|
|
|
return true;
|
|
|
|
}
|
2017-10-03 19:14:46 +00:00
|
|
|
|
2018-05-22 15:54:19 +00:00
|
|
|
static bool
|
2019-01-26 15:40:58 +00:00
|
|
|
dh_client_priv(llarp::SharedSecret &shared, const PubKey &pk,
|
|
|
|
const SecretKey &sk, const TunnelNonce &n)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2018-06-12 11:57:14 +00:00
|
|
|
llarp::SharedSecret dh_result;
|
2018-08-13 08:47:24 +00:00
|
|
|
|
2019-01-02 01:04:08 +00:00
|
|
|
if(dh(dh_result, sk.toPublic(), pk, pk.data(), sk))
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2019-01-02 01:04:08 +00:00
|
|
|
return crypto_generichash_blake2b(shared.data(), 32, n.data(), 32,
|
2019-01-02 01:04:04 +00:00
|
|
|
dh_result.data(), 32)
|
2018-10-23 11:29:37 +00:00
|
|
|
!= -1;
|
2018-05-22 15:54:19 +00:00
|
|
|
}
|
2018-08-13 08:47:24 +00:00
|
|
|
llarp::LogWarn("crypto::dh_client - dh failed");
|
2018-05-22 15:54:19 +00:00
|
|
|
return false;
|
|
|
|
}
|
2018-05-18 16:08:47 +00:00
|
|
|
|
2018-05-22 15:54:19 +00:00
|
|
|
static bool
|
2019-01-26 15:40:58 +00:00
|
|
|
dh_server_priv(llarp::SharedSecret &shared, const PubKey &pk,
|
|
|
|
const SecretKey &sk, const TunnelNonce &n)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2018-06-12 11:57:14 +00:00
|
|
|
llarp::SharedSecret dh_result;
|
2019-01-02 01:04:08 +00:00
|
|
|
if(dh(dh_result, pk, sk.toPublic(), pk.data(), sk))
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2019-01-02 01:04:08 +00:00
|
|
|
return crypto_generichash_blake2b(shared.data(), 32, n.data(), 32,
|
2019-01-02 01:04:04 +00:00
|
|
|
dh_result.data(), 32)
|
2018-10-23 11:29:37 +00:00
|
|
|
!= -1;
|
2018-05-22 15:54:19 +00:00
|
|
|
}
|
2018-08-13 08:47:24 +00:00
|
|
|
llarp::LogWarn("crypto::dh_server - dh failed");
|
2018-05-22 15:54:19 +00:00
|
|
|
return false;
|
|
|
|
}
|
2018-05-18 16:08:47 +00:00
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
CryptoLibSodium::CryptoLibSodium()
|
|
|
|
{
|
|
|
|
if(sodium_init() == -1)
|
|
|
|
{
|
|
|
|
throw std::runtime_error("sodium_init() returned -1");
|
|
|
|
}
|
|
|
|
char *avx2 = std::getenv("AVX2_FORCE_DISABLE");
|
|
|
|
if(avx2 && std::string(avx2) == "1")
|
|
|
|
{
|
|
|
|
ntru_init(1);
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
ntru_init(0);
|
|
|
|
}
|
|
|
|
int seed = 0;
|
2019-05-28 19:45:09 +00:00
|
|
|
randombytes(reinterpret_cast< unsigned char * >(&seed), sizeof(seed));
|
2019-01-26 15:40:58 +00:00
|
|
|
srand(seed);
|
|
|
|
}
|
|
|
|
|
|
|
|
bool
|
2019-02-01 01:58:06 +00:00
|
|
|
CryptoLibSodium::xchacha20(const llarp_buffer_t &buff,
|
|
|
|
const SharedSecret &k, const TunnelNonce &n)
|
2019-01-26 15:40:58 +00:00
|
|
|
{
|
|
|
|
return crypto_stream_xchacha20_xor(buff.base, buff.base, buff.sz,
|
|
|
|
n.data(), k.data())
|
|
|
|
== 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
bool
|
2019-02-01 01:58:06 +00:00
|
|
|
CryptoLibSodium::xchacha20_alt(const llarp_buffer_t &out,
|
|
|
|
const llarp_buffer_t &in,
|
2019-01-26 15:40:58 +00:00
|
|
|
const SharedSecret &k, const byte_t *n)
|
|
|
|
{
|
|
|
|
if(in.sz > out.sz)
|
|
|
|
return false;
|
|
|
|
return crypto_stream_xchacha20_xor(out.base, in.base, in.sz, n, k.data())
|
|
|
|
== 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
bool
|
|
|
|
CryptoLibSodium::dh_client(llarp::SharedSecret &shared, const PubKey &pk,
|
|
|
|
const SecretKey &sk, const TunnelNonce &n)
|
|
|
|
{
|
|
|
|
return dh_client_priv(shared, pk, sk, n);
|
|
|
|
}
|
|
|
|
/// path dh relay side
|
|
|
|
bool
|
|
|
|
CryptoLibSodium::dh_server(llarp::SharedSecret &shared, const PubKey &pk,
|
|
|
|
const SecretKey &sk, const TunnelNonce &n)
|
|
|
|
{
|
|
|
|
return dh_server_priv(shared, pk, sk, n);
|
|
|
|
}
|
|
|
|
/// transport dh client side
|
|
|
|
bool
|
|
|
|
CryptoLibSodium::transport_dh_client(llarp::SharedSecret &shared,
|
|
|
|
const PubKey &pk, const SecretKey &sk,
|
|
|
|
const TunnelNonce &n)
|
|
|
|
{
|
|
|
|
return dh_client_priv(shared, pk, sk, n);
|
|
|
|
}
|
|
|
|
/// transport dh server side
|
|
|
|
bool
|
|
|
|
CryptoLibSodium::transport_dh_server(llarp::SharedSecret &shared,
|
|
|
|
const PubKey &pk, const SecretKey &sk,
|
|
|
|
const TunnelNonce &n)
|
|
|
|
{
|
|
|
|
return dh_server_priv(shared, pk, sk, n);
|
|
|
|
}
|
|
|
|
|
|
|
|
bool
|
2019-02-01 01:58:06 +00:00
|
|
|
CryptoLibSodium::shorthash(ShortHash &result, const llarp_buffer_t &buff)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2019-01-02 01:04:08 +00:00
|
|
|
return crypto_generichash_blake2b(result.data(), ShortHash::SIZE,
|
|
|
|
buff.base, buff.sz, nullptr, 0)
|
2018-05-22 15:54:19 +00:00
|
|
|
!= -1;
|
|
|
|
}
|
2018-01-19 16:51:27 +00:00
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
bool
|
2019-02-01 01:58:06 +00:00
|
|
|
CryptoLibSodium::hmac(byte_t *result, const llarp_buffer_t &buff,
|
2019-01-26 15:40:58 +00:00
|
|
|
const SharedSecret &secret)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2018-10-23 11:29:37 +00:00
|
|
|
return crypto_generichash_blake2b(result, HMACSIZE, buff.base, buff.sz,
|
2019-01-02 01:04:04 +00:00
|
|
|
secret.data(), HMACSECSIZE)
|
2018-05-22 15:54:19 +00:00
|
|
|
!= -1;
|
|
|
|
}
|
2018-01-19 16:51:27 +00:00
|
|
|
|
2019-05-28 19:45:09 +00:00
|
|
|
static bool
|
|
|
|
hash(uint8_t *result, const llarp_buffer_t &buff)
|
|
|
|
{
|
|
|
|
return crypto_generichash_blake2b(result, HASHSIZE, buff.base, buff.sz,
|
|
|
|
nullptr, 0)
|
|
|
|
!= -1;
|
|
|
|
}
|
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
bool
|
2019-03-20 14:51:10 +00:00
|
|
|
CryptoLibSodium::sign(Signature &sig, const SecretKey &secret,
|
|
|
|
const llarp_buffer_t &buf)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2019-10-14 13:47:06 +00:00
|
|
|
return crypto_sign_detached(sig.data(), nullptr, buf.base, buf.sz,
|
|
|
|
secret.data())
|
|
|
|
!= -1;
|
2018-05-22 15:54:19 +00:00
|
|
|
}
|
2018-01-19 16:51:27 +00:00
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
bool
|
2019-03-20 14:51:10 +00:00
|
|
|
CryptoLibSodium::verify(const PubKey &pub, const llarp_buffer_t &buf,
|
2019-01-26 15:40:58 +00:00
|
|
|
const Signature &sig)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2019-10-14 13:47:06 +00:00
|
|
|
return crypto_sign_verify_detached(sig.data(), buf.base, buf.sz,
|
|
|
|
pub.data())
|
|
|
|
!= -1;
|
2018-05-22 15:54:19 +00:00
|
|
|
}
|
2018-01-31 19:59:26 +00:00
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
bool
|
|
|
|
CryptoLibSodium::seed_to_secretkey(llarp::SecretKey &secret,
|
|
|
|
const llarp::IdentitySecret &seed)
|
2019-01-21 15:45:18 +00:00
|
|
|
{
|
2019-10-22 15:58:34 +00:00
|
|
|
PubKey pk;
|
2019-10-23 12:43:37 +00:00
|
|
|
return crypto_sign_ed25519_seed_keypair(pk.data(), secret.data(),
|
|
|
|
seed.data())
|
|
|
|
!= -1;
|
2019-01-21 15:45:18 +00:00
|
|
|
}
|
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
void
|
2019-02-01 01:58:06 +00:00
|
|
|
CryptoLibSodium::randomize(const llarp_buffer_t &buff)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
|
|
|
randombytes((unsigned char *)buff.base, buff.sz);
|
|
|
|
}
|
2018-01-31 19:59:26 +00:00
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
void
|
2019-05-28 19:45:09 +00:00
|
|
|
CryptoLibSodium::randbytes(byte_t *ptr, size_t sz)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
|
|
|
randombytes((unsigned char *)ptr, sz);
|
|
|
|
}
|
2018-02-01 22:34:04 +00:00
|
|
|
|
2019-10-28 14:16:00 +00:00
|
|
|
void
|
2019-01-26 15:40:58 +00:00
|
|
|
CryptoLibSodium::identity_keygen(llarp::SecretKey &keys)
|
2018-05-23 20:37:43 +00:00
|
|
|
{
|
2019-10-22 15:58:34 +00:00
|
|
|
PubKey pk;
|
2019-10-28 14:16:00 +00:00
|
|
|
int result = crypto_sign_keypair(pk.data(), keys.data());
|
|
|
|
assert(result != -1);
|
2019-10-23 12:43:37 +00:00
|
|
|
const PubKey sk_pk = keys.toPublic();
|
2019-10-28 14:16:00 +00:00
|
|
|
assert(pk == sk_pk);
|
2019-11-04 19:21:32 +00:00
|
|
|
(void)result;
|
|
|
|
(void)sk_pk;
|
2018-05-23 20:37:43 +00:00
|
|
|
}
|
|
|
|
|
2019-11-27 01:40:55 +00:00
|
|
|
bool
|
|
|
|
CryptoLibSodium::check_identity_privkey(const llarp::SecretKey &keys)
|
|
|
|
{
|
|
|
|
AlignedBuffer< crypto_sign_SEEDBYTES > seed;
|
|
|
|
llarp::PubKey pk;
|
|
|
|
llarp::SecretKey sk;
|
|
|
|
if(crypto_sign_ed25519_sk_to_seed(seed.data(), keys.data()) == -1)
|
|
|
|
return false;
|
|
|
|
if(crypto_sign_seed_keypair(pk.data(), sk.data(), seed.data()) == -1)
|
|
|
|
return false;
|
|
|
|
return keys.toPublic() == pk && sk == keys;
|
|
|
|
}
|
|
|
|
|
2019-01-26 15:40:58 +00:00
|
|
|
void
|
|
|
|
CryptoLibSodium::encryption_keygen(llarp::SecretKey &keys)
|
2018-05-22 15:54:19 +00:00
|
|
|
{
|
2019-01-02 01:04:04 +00:00
|
|
|
auto d = keys.data();
|
2019-10-14 13:47:06 +00:00
|
|
|
randbytes(d, 32);
|
2019-01-02 01:04:03 +00:00
|
|
|
crypto_scalarmult_curve25519_base(d + 32, d);
|
2018-05-22 15:54:19 +00:00
|
|
|
}
|
2018-06-10 14:05:48 +00:00
|
|
|
|
2018-08-13 23:22:31 +00:00
|
|
|
bool
|
2019-01-26 15:40:58 +00:00
|
|
|
CryptoLibSodium::pqe_encrypt(PQCipherBlock &ciphertext,
|
|
|
|
SharedSecret &sharedkey,
|
|
|
|
const PQPubKey &pubkey)
|
2018-08-13 23:22:31 +00:00
|
|
|
{
|
2019-01-02 01:04:08 +00:00
|
|
|
return crypto_kem_enc(ciphertext.data(), sharedkey.data(), pubkey.data())
|
2019-01-02 01:04:03 +00:00
|
|
|
!= -1;
|
2018-08-13 23:22:31 +00:00
|
|
|
}
|
|
|
|
bool
|
2019-01-26 15:40:58 +00:00
|
|
|
CryptoLibSodium::pqe_decrypt(const PQCipherBlock &ciphertext,
|
|
|
|
SharedSecret &sharedkey,
|
|
|
|
const byte_t *secretkey)
|
2018-08-13 23:22:31 +00:00
|
|
|
{
|
2019-01-02 01:04:08 +00:00
|
|
|
return crypto_kem_dec(sharedkey.data(), ciphertext.data(), secretkey)
|
2019-01-02 01:04:03 +00:00
|
|
|
!= -1;
|
2018-08-13 23:22:31 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
void
|
2019-01-26 15:40:58 +00:00
|
|
|
CryptoLibSodium::pqe_keygen(PQKeyPair &keypair)
|
2018-08-13 23:22:31 +00:00
|
|
|
{
|
2019-01-02 01:04:04 +00:00
|
|
|
auto d = keypair.data();
|
2019-01-02 01:04:03 +00:00
|
|
|
crypto_kem_keypair(d + PQ_SECRETKEYSIZE, d);
|
2018-08-13 23:22:31 +00:00
|
|
|
}
|
2019-01-26 15:40:58 +00:00
|
|
|
} // namespace sodium
|
|
|
|
|
|
|
|
const byte_t *
|
|
|
|
seckey_topublic(const SecretKey &sec)
|
|
|
|
{
|
|
|
|
return sec.data() + 32;
|
|
|
|
}
|
2018-08-13 23:22:31 +00:00
|
|
|
|
|
|
|
const byte_t *
|
2019-01-02 01:04:04 +00:00
|
|
|
pq_keypair_to_public(const PQKeyPair &k)
|
2018-08-13 23:22:31 +00:00
|
|
|
{
|
2019-01-02 01:04:04 +00:00
|
|
|
return k.data() + PQ_SECRETKEYSIZE;
|
2018-06-10 14:05:48 +00:00
|
|
|
}
|
|
|
|
|
2018-08-13 23:22:31 +00:00
|
|
|
const byte_t *
|
2019-01-02 01:04:04 +00:00
|
|
|
pq_keypair_to_secret(const PQKeyPair &k)
|
2018-08-13 23:22:31 +00:00
|
|
|
{
|
2019-01-02 01:04:04 +00:00
|
|
|
return k.data();
|
2018-08-13 23:22:31 +00:00
|
|
|
}
|
2017-10-03 19:14:46 +00:00
|
|
|
|
2018-12-13 16:14:44 +00:00
|
|
|
uint64_t
|
|
|
|
randint()
|
|
|
|
{
|
|
|
|
uint64_t i;
|
|
|
|
randombytes((byte_t *)&i, sizeof(i));
|
|
|
|
return i;
|
|
|
|
}
|
2018-12-11 00:53:11 +00:00
|
|
|
|
|
|
|
} // namespace llarp
|