mirror of
https://github.com/rosenpass/rosenpass.git
synced 2026-01-05 09:40:15 -08:00
4e72c52ca0
Initial implementation of the Rosenpass tool, implemented by @koraa. Includes contributions and some lints from @wucke13. Co-authored-by: wucke13 <wucke13@gmail.com>
46 lines
1.4 KiB
Rust
46 lines
1.4 KiB
Rust
use {
|
|
crate::{prftree::PrfTree, sodium::KEY_SIZE},
|
|
anyhow::Result,
|
|
};
|
|
|
|
pub fn protocol() -> Result<PrfTree> {
|
|
PrfTree::zero().mix("Rosenpass v1 mceliece460896 Kyber512 ChaChaPoly1305 BLAKE2s".as_bytes())
|
|
}
|
|
|
|
// TODO Use labels that can serve as idents
|
|
macro_rules! prflabel {
|
|
($base:ident, $name:ident, $($lbl:expr),* ) => {
|
|
pub fn $name() -> Result<PrfTree> {
|
|
let t = $base()?;
|
|
$( let t = t.mix($lbl.as_bytes())?; )*
|
|
Ok(t)
|
|
}
|
|
}
|
|
}
|
|
|
|
prflabel!(protocol, mac, "mac");
|
|
prflabel!(protocol, cookie, "cookie");
|
|
prflabel!(protocol, peerid, "peer id");
|
|
prflabel!(protocol, biscuit_ad, "biscuit additional data");
|
|
prflabel!(protocol, ckinit, "chaining key init");
|
|
prflabel!(protocol, _ckextract, "chaining key extract");
|
|
|
|
macro_rules! prflabel_leaf {
|
|
($base:ident, $name:ident, $($lbl:expr),* ) => {
|
|
pub fn $name() -> Result<[u8; KEY_SIZE]> {
|
|
let t = $base()?;
|
|
$( let t = t.mix($lbl.as_bytes())?; )*
|
|
Ok(t.into_value())
|
|
}
|
|
}
|
|
}
|
|
|
|
prflabel_leaf!(_ckextract, mix, "mix");
|
|
prflabel_leaf!(_ckextract, hs_enc, "handshake encryption");
|
|
prflabel_leaf!(_ckextract, ini_enc, "initiator handshake encryption");
|
|
prflabel_leaf!(_ckextract, res_enc, "responder handshake encryption");
|
|
|
|
prflabel!(_ckextract, _user, "user");
|
|
prflabel!(_user, _rp, "rosenpass.eu");
|
|
prflabel_leaf!(_rp, osk, "wireguard psk");
|