mirror of https://github.com/oxen-io/lokinet
commit
3f3551fbd1
@ -1,118 +1,6 @@
|
||||
#ifndef LLARP_CRYPTO_H_
|
||||
#define LLARP_CRYPTO_H_
|
||||
#include <buffer.h>
|
||||
#include <common.hpp>
|
||||
|
||||
#include <functional>
|
||||
#include <stdbool.h>
|
||||
#include <stdint.h>
|
||||
|
||||
/**
|
||||
* crypto.h
|
||||
*
|
||||
* libsodium abstraction layer
|
||||
* potentially allow libssl support in the future
|
||||
*/
|
||||
|
||||
static constexpr uint32_t PUBKEYSIZE = 32;
|
||||
static constexpr uint32_t SECKEYSIZE = 64;
|
||||
static constexpr uint32_t NONCESIZE = 24;
|
||||
static constexpr uint32_t SHAREDKEYSIZE = 32;
|
||||
static constexpr uint32_t HASHSIZE = 64;
|
||||
static constexpr uint32_t SHORTHASHSIZE = 32;
|
||||
static constexpr uint32_t HMACSECSIZE = 32;
|
||||
static constexpr uint32_t SIGSIZE = 64;
|
||||
static constexpr uint32_t TUNNONCESIZE = 32;
|
||||
static constexpr uint32_t HMACSIZE = 32;
|
||||
static constexpr uint32_t PATHIDSIZE = 16;
|
||||
|
||||
#include <libntrup/ntru.h>
|
||||
|
||||
#define PQ_CIPHERTEXTSIZE crypto_kem_CIPHERTEXTBYTES
|
||||
#define PQ_PUBKEYSIZE crypto_kem_PUBLICKEYBYTES
|
||||
#define PQ_SECRETKEYSIZE crypto_kem_SECRETKEYBYTES
|
||||
#define PQ_KEYPAIRSIZE (PQ_SECRETKEYSIZE + PQ_PUBKEYSIZE)
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
/// label functors
|
||||
|
||||
/// PKE(result, publickey, secretkey, nonce)
|
||||
using path_dh_func = std::function<bool(byte_t *, const byte_t *, const byte_t *,
|
||||
const byte_t *)>;
|
||||
|
||||
/// TKE(result, publickey, secretkey, nonce)
|
||||
using transport_dh_func = std::function<bool(byte_t *, const byte_t *,
|
||||
const byte_t *, const byte_t *)>;
|
||||
|
||||
/// SD/SE(buffer, key, nonce)
|
||||
using sym_cipher_func = std::function<bool(llarp_buffer_t, const byte_t *,
|
||||
const byte_t *)>;
|
||||
|
||||
/// H(result, body)
|
||||
using hash_func = std::function<bool(byte_t *, llarp_buffer_t)>;
|
||||
|
||||
/// SH(result, body)
|
||||
using shorthash_func = std::function<bool(byte_t *, llarp_buffer_t)>;
|
||||
|
||||
/// MDS(result, body, shared_secret)
|
||||
using hmac_func = std::function<bool(byte_t *, llarp_buffer_t, const byte_t *)>;
|
||||
|
||||
/// S(sig, secretkey, body)
|
||||
using sign_func = std::function<bool(byte_t *, const byte_t *, llarp_buffer_t)>;
|
||||
|
||||
/// V(pubkey, body, sig)
|
||||
using verify_func = std::function<bool(const byte_t *, llarp_buffer_t,
|
||||
const byte_t *)>;
|
||||
|
||||
/// library crypto configuration
|
||||
struct Crypto
|
||||
{
|
||||
/// xchacha symettric cipher
|
||||
sym_cipher_func xchacha20;
|
||||
/// path dh creator's side
|
||||
path_dh_func dh_client;
|
||||
/// path dh relay side
|
||||
path_dh_func dh_server;
|
||||
/// transport dh client side
|
||||
transport_dh_func transport_dh_client;
|
||||
/// transport dh server side
|
||||
transport_dh_func transport_dh_server;
|
||||
/// blake2b 512 bit
|
||||
hash_func hash;
|
||||
/// blake2b 256 bit
|
||||
shorthash_func shorthash;
|
||||
/// blake2s 256 bit hmac
|
||||
hmac_func hmac;
|
||||
/// ed25519 sign
|
||||
sign_func sign;
|
||||
/// ed25519 verify
|
||||
verify_func verify;
|
||||
/// randomize buffer
|
||||
std::function<void(llarp_buffer_t)> randomize;
|
||||
/// randomizer memory
|
||||
std::function<void(void *, size_t)> randbytes;
|
||||
/// generate signing keypair
|
||||
std::function<void(byte_t *)> identity_keygen;
|
||||
/// generate encryption keypair
|
||||
std::function<void(byte_t *)> encryption_keygen;
|
||||
/// generate post quantum encrytion key
|
||||
std::function<void(byte_t *)> pqe_keygen;
|
||||
/// post quantum decrypt (buffer, sharedkey_dst, sec)
|
||||
std::function<bool(const byte_t *, byte_t *, const byte_t *)> pqe_decrypt;
|
||||
/// post quantum encrypt (buffer, sharedkey_dst, pub)
|
||||
std::function<bool(byte_t *, byte_t *, const byte_t *)> pqe_encrypt;
|
||||
|
||||
// Give a basic type tag for the constructor to pick libsodium
|
||||
struct sodium {};
|
||||
|
||||
Crypto(Crypto::sodium tag);
|
||||
};
|
||||
|
||||
/// return random 64bit unsigned interger
|
||||
uint64_t
|
||||
randint();
|
||||
|
||||
}
|
||||
|
||||
#ifdef __cplusplus
|
||||
#include "crypto.hpp"
|
||||
#endif
|
||||
#endif
|
||||
|
Loading…
Reference in New Issue