sdrv.h

Go to the documentation of this file.

#ifndef SDRV_SDRV_H
#define SDRV_SDRV_H
 
#include "common/bytes/span/span.h"
#include "crypto/kdf/hkdf/hkdf.h"
#include "tls/ext/salpn/negotiate.h"
#include "tls/ext/salpn/sni_check.h"
#include "tls/ext/stp/server_tp.h"
#include "tls/handshake/core/tls/cert.h"
#include "tls/handshake/core/tls/initial.h"
#include "tls/handshake/core/tls/suitehash.h"
#include "tls/handshake/core/tls/transcript.h"
#include "tls/keys/ticket/ticket.h"


typedef struct {
  wired_span certs[TLS_CERT_CHAIN_MAX]; 
  usz        cert_count; 
  transcript tr;         
  stp_limits limits;     
  u64 peer_max_datagram_frame_size;
  u64 peer_initial_max_data; 
  u64 peer_initial_max_stream_data_bidi_local; 
  u64 peer_initial_max_stream_data_bidi_remote;
  u64 peer_initial_max_stream_data_uni;
  u64 peer_initial_max_streams_uni;
  wired_span alpn_tok;
  const char* raw_alpns;
  u64 last_error;
  int has_ticket_key;
  int psk_accepted;
  int early_data_accepted;
  int early_keys_dropped;
  int hs_ready; 
  salpn_choice alpn;
  int hrr_needed;
  int hrr_sent;
  salpn_sni_outcome sni_outcome;
  u32 client_version;
  u32 negotiated_version;
  u16 group;
  u16 cipher_suite; 
  u16 hrr_cipher_suite;
  u8  server_priv[32]; 
  u8 server_pub[65];   
  u8 p256_priv[32];    
  u8 cert_buf[512];    
  u8 san_ipv4[4];
  u8 client_pub[65]; 
  u8 client_sid[32]; 
  u8 client_sid_len; 
  u8 ticket_key[TICKET_KEY_LEN];
  u8 ticket_key_prev[TICKET_KEY_LEN];
  u8 psk_secret[TICKET_SECRET_LEN];
  initial_keys early_keys;
  u8 hs_secret[TLS_HASH_MAX];
  u8 s_hs_traffic[TLS_HASH_MAX];
  u8 ecdhe_secret[32];
  u8 odcid[20];
  u8 odcid_len; 
  u8 iscid[20]; 
  u8 iscid_len; 
  u8 tp_odcid[20];
  u8 tp_odcid_len; 
  u8 rscid[20];    
  u8 rscid_len;    
  u8 sreset_token[16];
  u8 sreset_token_set; 
  u8 ch1_hash[TLS_HASH_MAX];
  u8 pref_v4[4];
  u16 pref_v4_port;
  u8 pref_v6[16];
  u16 pref_v6_port;
  u8 pref_cid[20];
  u8 pref_cid_len;
  u8 pref_token[16];
} sdrv;

typedef struct {
  const u8* v4;      
  u16       v4_port; 
  const u8* v6;      
  u16       v6_port; 
  const u8* cid;     
  u8        cid_len; 
  const u8* token;   
} sdrv_pref_addr;

void sdrv_set_preferred_address(sdrv* s, const sdrv_pref_addr* p);

void sdrv_set_raw_alpns(sdrv* s, const char* raw_alpns);

typedef struct {
  const u8*         server_priv_x25519; 
  const u8*         server_pub_x25519;  
  const u8*         sign_priv; 
  const wired_span* chain;     
  usz chain_count;             
  const u8* san_ipv4;
  u64 now_secs;
  const u8* ticket_key;
} sdrv_init_in;

void sdrv_init(sdrv* s, const sdrv_init_in* in);

int sdrv_set_cids(sdrv* s, wired_span odcid, wired_span iscid);

void sdrv_set_group(sdrv* s, u16 group);

int sdrv_set_cids_retried(
    sdrv* s, wired_span odcid, wired_span iscid, wired_span true_odcid);

int sdrv_set_retry_scid(sdrv* s, wired_span rscid);

void sdrv_set_ticket_key_prev(sdrv* s, const u8* prev);

int sdrv_recv_client_hello(sdrv* s, const u8* ch_msg, usz ch_len);

salpn_sni_outcome sdrv_sni_outcome(const sdrv* s);

int sdrv_enforce_sni(sdrv* s);

void sdrv_set_client_version(sdrv* s, u32 version);

u32 sdrv_wire_version(const sdrv* s);

int sdrv_hrr_pending(const sdrv* s);

int sdrv_early_allowed(const sdrv* s);

int sdrv_build_hrr(sdrv* s, wired_obuf* out);

u64 sdrv_last_error(const sdrv* s);

typedef struct {
  wired_obuf* sh; 
  wired_obuf* hs; 
} sdrv_flight_out;

int sdrv_build_server_flight(
    sdrv* s, const u8* server_random, const sdrv_flight_out* out);

int sdrv_handshake_secret(const sdrv* s, const u8** secret);

int sdrv_early_keys(const sdrv* s, initial_keys* out);

void sdrv_discard_early_keys(sdrv* s);
 
#endif