lokinet/include/llarp/crypto.h

#ifndef LLARP_CRYPTO_H_
#define LLARP_CRYPTO_H_
#include <llarp/buffer.h>
#include <llarp/common.hpp>
#include <functional>
#include <stdbool.h>
#include <stdint.h>

/**
 * crypto.h
 *
 * libsodium abstraction layer
 * potentially allow libssl support in the future
 */

static constexpr uint32_t PUBKEYSIZE = 32;
static constexpr uint32_t SECKEYSIZE = 64;
static constexpr uint32_t NONCESIZE = 24;
static constexpr uint32_t SHAREDKEYSIZE = 32;
static constexpr uint32_t HASHSIZE = 64;
static constexpr uint32_t SHORTHASHSIZE = 32;
static constexpr uint32_t HMACSECSIZE = 32;
static constexpr uint32_t SIGSIZE = 64;
static constexpr uint32_t TUNNONCESIZE = 32;
static constexpr uint32_t HMACSIZE = 32;
static constexpr uint32_t PATHIDSIZE = 16;

#include <libntrup/ntru.h>

#define PQ_CIPHERTEXTSIZE crypto_kem_CIPHERTEXTBYTES
#define PQ_PUBKEYSIZE crypto_kem_PUBLICKEYBYTES
#define PQ_SECRETKEYSIZE crypto_kem_SECRETKEYBYTES
#define PQ_KEYPAIRSIZE (PQ_SECRETKEYSIZE + PQ_PUBKEYSIZE)

namespace llarp
{
/// label functors

/// PKE(result, publickey, secretkey, nonce)
using path_dh_func = std::function<bool(byte_t *, const byte_t *, const byte_t *,
                                   const byte_t *)>;

/// TKE(result, publickey, secretkey, nonce)
using transport_dh_func = std::function<bool(byte_t *, const byte_t *,
                                        const byte_t *, const byte_t *)>;

/// SD/SE(buffer, key, nonce)
using sym_cipher_func = std::function<bool(llarp_buffer_t, const byte_t *,
                                      const byte_t *)>;

/// H(result, body)
using hash_func = std::function<bool(byte_t *, llarp_buffer_t)>;

/// SH(result, body)
using shorthash_func = std::function<bool(byte_t *, llarp_buffer_t)>;

/// MDS(result, body, shared_secret)
using hmac_func = std::function<bool(byte_t *, llarp_buffer_t, const byte_t *)>;

/// S(sig, secretkey, body)
using sign_func = std::function<bool(byte_t *, const byte_t *, llarp_buffer_t)>;

/// V(pubkey, body, sig)
using verify_func = std::function<bool(const byte_t *, llarp_buffer_t,
                                  const byte_t *)>;

/// library crypto configuration
struct Crypto
{
  /// xchacha symettric cipher
  sym_cipher_func xchacha20;
  /// path dh creator's side
  path_dh_func dh_client;
  /// path dh relay side
  path_dh_func dh_server;
  /// transport dh client side
  transport_dh_func transport_dh_client;
  /// transport dh server side
  transport_dh_func transport_dh_server;
  /// blake2b 512 bit
  hash_func hash;
  /// blake2b 256 bit
  shorthash_func shorthash;
  /// blake2s 256 bit hmac
  hmac_func hmac;
  /// ed25519 sign
  sign_func sign;
  /// ed25519 verify
  verify_func verify;
  /// randomize buffer
  std::function<void(llarp_buffer_t)> randomize;
  /// randomizer memory
  std::function<void(void *, size_t)> randbytes;
  /// generate signing keypair
  std::function<void(byte_t *)> identity_keygen;
  /// generate encryption keypair
  std::function<void(byte_t *)> encryption_keygen;
  /// generate post quantum encrytion key
  std::function<void(byte_t *)> pqe_keygen;
  /// post quantum decrypt (buffer, sharedkey_dst, sec)
  std::function<bool(const byte_t *, byte_t *, const byte_t *)> pqe_decrypt;
  /// post quantum encrypt (buffer, sharedkey_dst,  pub)
  std::function<bool(byte_t *, byte_t *, const byte_t *)> pqe_encrypt;

  // Give a basic type tag for the constructor to pick libsodium
  struct sodium {};

  Crypto(Crypto::sodium tag);
};

/// return random 64bit unsigned interger
uint64_t
randint();

}

#endif