Documentation
¶
Overview ¶
Package transport implements an encrypted and authenticated connection for transferring byte slices over a network. The key-exchange is like SIGMA-I, with the exception that instead of unvirersally verifiable signatures, nacl/box between one party's ephemeral key and the other's long-term key is used for authentication (this provides deniability). Subsequent messages are encrypted using nacl/box with the message counter as an implicit nonce.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Conn ¶
type Conn struct {
// contains filtered or unexported fields
}
Conn is an encrypted and authenticated connection that is NOT concurrency-safe
func Handshake ¶
func Handshake(unencrypted net.Conn, pk, sk, expectedPK *[32]byte, maxFrameSize int) (*Conn, *[32]byte, error)
Handshake establishes an encrypted and authenticated connection. unencrypted is the underlying connection that will be used for the handshake and the following calls to ReadFrame and WriteFrame. The connection should not be used after calling Handshake. pk and sk are the Curve25519 public and private keys of the caller. If expectedPK is not nil, pk will not be revealed to the other party unless they prove that they hold the secret key that corresponds to expectedPK. Note that both sides of a connection using this option will result in a deadlock. The public key of the other party is returned along with the wrapped connection.
Source Files
Directories