Module ntor_v3 

Implements the ntor v3 key exchange, as described in proposal 332.

The main difference between the ntor v3r handshake and the original ntor handshake is that this this one allows each party to encrypt data (without forward secrecy) after it sends the first message.

Macros

define_tweaks 🔒

Helper to define a set of tweak values as instances of Encap.

Structs

DigestWriter 🔒

Wrapper around a Digest or ExtendedOutput object that lets us use it as a tor_bytes::Writer.

Encap 🔒

An encapsulated value for passing as input to a MAC, digest, or KDF algorithm.

NtorV3Client 🔒

Client side of the ntor v3 handshake.

NtorV3HandshakeState 🔒

Client state for the ntor v3 handshake.

NtorV3KeyGenerator 🔒

A key generator returned from an ntor v3 handshake.

NtorV3PublicKey 🔒

Key information about a relay used for the ntor v3 handshake.

NtorV3SecretKey 🔒

Secret key information used by a relay for the ntor v3 handshake.

NtorV3Server 🔒

Server side of the ntor v3 handshake.

NtorV3XofReader 🔒

Opaque wrapper type for NtorV3’s hash reader.

Constants

DIGEST_LEN 🔒

The size of a digest output in bytes.

ENC_KEY_LEN 🔒

The size of an encryption key in bytes.

ID_LEN 🔒

The length of a node identity in bytes.

MAC_KEY_LEN 🔒

The size of a MAC key in bytes.

MAC_LEN 🔒

The length of a MAC output in bytes.

NTOR3_CIRC_VERIFICATION 🔒

The verification string to be used for circuit extension.

PROTOID 🔒

Protocol ID: concatenated with other things in the protocol to prevent hash confusion.

PUB_KEY_LEN 🔒

The size of a curve25519 public key in bytes.

T_AUTH 🔒

Authentication tweak: used to derive the final authentication value for the handshake.

T_FINAL 🔒

Final KDF tweak: used to derive keys for encrypting relay message and for the actual tor circuit.

T_KEY_SEED 🔒

Key seeding tweak: used to derive final KDF input from secret_input.

T_MSGKDF 🔒

Message KDF tweak: used when deriving keys for encrypting and MACing client message.

T_MSGMAC 🔒

Message MAC tweak: used to compute the MAC of an encrypted client message.

T_VERIFY 🔒

Verifying tweak: used to derive ‘verify’ value from secret_input.

Traits

MsgReply 🔒

Trait for an object that handle and incoming client message and return a server’s reply.

Functions

client_handshake_ntor_v3 🔒

Client-side Ntor version 3 handshake, part one.

client_handshake_ntor_v3_no_keygen 🔒

As client_handshake_ntor_v3, but don’t generate an ephemeral DH key: instead take that key an arguments my_sk.

client_handshake_ntor_v3_part2 🔒

Finalize the handshake on the client side.

decrypt 🔒

Perform a symmetric decryption operation and return the encrypted data.

encrypt 🔒

Perform a symmetric encryption operation and return the encrypted data.

h_key_seed 🔒

Hash tweaked with T_KEY_SEED

h_verify 🔒

Hash tweaked with T_VERIFY

hash 🔒

Compute a tweaked hash.

kdf_msgkdf 🔒

Helper: compute the encryption key and mac_key for the client’s encrypted message.

server_handshake_ntor_v3 🔒

Complete an ntor v3 handshake as a server.

server_handshake_ntor_v3_no_keygen 🔒

As server_handshake_ntor_v3, but take a secret key instead of an RNG.

Type Aliases

DigestVal 🔒

The output of the digest, as an array.

EncKey 🔒

A key for symmetric encryption or decryption.

MacKey 🔒

A key for message authentication codes.

MacVal 🔒

The output of the MAC.