crypto

type ECDH interface {
	// GenerateKey will create a new Private/Public key pair based on random numbers from io.Reader.
	// Returns error if it was unable to create keys.
	GenerateKey(io.Reader) (PrivateKey, error)
	// Marshal converts a Private/Public key pair into a Base64.RawUrlEncoded string.
	// Returned string separates the pairs with a space, where private key is first.
	// Returns an error if unable to convert values to a string.
	Marshal(PrivateKey) (string, error)
	// Unmarshal will decode a Base64.RawUrlEncoded string into a Private/Public key pair.
	// String may be Private / Public keys separated by a space or alternatively a private
	// key and the public will be generated automatically.
	// Returns an error if string cannot be decoded.
	Unmarshal(string) (PrivateKey, error)
	// UnmarshalPublic will decode a Base64.RawUrlEncoded string into a Public key.
	// Returns an error if string cannot be decoded.
	UnmarshalPublic(string) (PublicKey, error)
	// GenerateSharedSecret Creates a shared secret based on the private of one and
	// public key of the other. Returns a byte slice.
	GenerateSharedSecret(PrivateKey, PublicKey) []byte
	// HashSalt adds the provided string salt to the SharedSecret byte slice sec.
	// It returns a Base64 RawUrl encoded string of the SHA256 Sum of bytes.
	HashSalt(string, []byte) string
	// HashToken generates the token hash for the connection handshake.
	// Returns a base64 encoded SHA256 checksum of the DSId and Token.
	HashToken(dsId string, token string) string
}

type PrivateKey struct {
	PublicKey
	D []byte
}

type PublicKey struct {
	Curve elliptic.Curve
	X, Y  *big.Int
}