mirror of
https://github.com/caddyserver/caddy.git
synced 2025-01-06 22:40:31 -05:00
dfbc2e81e3
quic-go now vendors all of its dependencies, so we don't need to vendor them here. Created by running: gvt delete github.com/lucas-clemente/quic-go gvt delete github.com/bifurcation/mint gvt delete github.com/lucas-clemente/aes12 gvt delete github.com/lucas-clemente/fnv128a gvt delete github.com/lucas-clemente/quic-go-certificates gvt delete github.com/aead/chacha20 gvt delete github.com/hashicorp/golang-lru gvt fetch -tag v0.10.0-no-integrationtests github.com/lucas-clemente/quic-go
60 lines
1.7 KiB
Go
60 lines
1.7 KiB
Go
package crypto
|
|
|
|
import (
|
|
"crypto"
|
|
"encoding/binary"
|
|
|
|
"github.com/bifurcation/mint"
|
|
"github.com/lucas-clemente/quic-go/internal/protocol"
|
|
)
|
|
|
|
const (
|
|
clientExporterLabel = "EXPORTER-QUIC client 1rtt"
|
|
serverExporterLabel = "EXPORTER-QUIC server 1rtt"
|
|
)
|
|
|
|
// A TLSExporter gets the negotiated ciphersuite and computes exporter
|
|
type TLSExporter interface {
|
|
ConnectionState() mint.ConnectionState
|
|
ComputeExporter(label string, context []byte, keyLength int) ([]byte, error)
|
|
}
|
|
|
|
func qhkdfExpand(secret []byte, label string, length int) []byte {
|
|
qlabel := make([]byte, 2+1+5+len(label))
|
|
binary.BigEndian.PutUint16(qlabel[0:2], uint16(length))
|
|
qlabel[2] = uint8(5 + len(label))
|
|
copy(qlabel[3:], []byte("QUIC "+label))
|
|
return mint.HkdfExpand(crypto.SHA256, secret, qlabel, length)
|
|
}
|
|
|
|
// DeriveAESKeys derives the AES keys and creates a matching AES-GCM AEAD instance
|
|
func DeriveAESKeys(tls TLSExporter, pers protocol.Perspective) (AEAD, error) {
|
|
var myLabel, otherLabel string
|
|
if pers == protocol.PerspectiveClient {
|
|
myLabel = clientExporterLabel
|
|
otherLabel = serverExporterLabel
|
|
} else {
|
|
myLabel = serverExporterLabel
|
|
otherLabel = clientExporterLabel
|
|
}
|
|
myKey, myIV, err := computeKeyAndIV(tls, myLabel)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
otherKey, otherIV, err := computeKeyAndIV(tls, otherLabel)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return NewAEADAESGCM(otherKey, myKey, otherIV, myIV)
|
|
}
|
|
|
|
func computeKeyAndIV(tls TLSExporter, label string) (key, iv []byte, err error) {
|
|
cs := tls.ConnectionState().CipherSuite
|
|
secret, err := tls.ComputeExporter(label, nil, cs.Hash.Size())
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
key = qhkdfExpand(secret, "key", cs.KeyLen)
|
|
iv = qhkdfExpand(secret, "iv", cs.IvLen)
|
|
return key, iv, nil
|
|
}
|