FD.io VPP  v20.09-64-g4f7b92f0a
Vector Packet Processing
wireguard_noise.h
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2020 Doc.ai and/or its affiliates.
3  * Copyright (c) 2015-2020 Jason A. Donenfeld <Jason@zx2c4.com>.
4  * Copyright (c) 2019-2020 Matt Dunwoodie <ncon@noconroy.net>.
5  * Licensed under the Apache License, Version 2.0 (the "License");
6  * you may not use this file except in compliance with the License.
7  * You may obtain a copy of the License at:
8  *
9  * http://www.apache.org/licenses/LICENSE-2.0
10  *
11  * Unless required by applicable law or agreed to in writing, software
12  * distributed under the License is distributed on an "AS IS" BASIS,
13  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14  * See the License for the specific language governing permissions and
15  * limitations under the License.
16  */
17 
18 #ifndef __included_wg_noise_h__
19 #define __included_wg_noise_h__
20 
21 #include <vlib/vlib.h>
22 #include <vnet/crypto/crypto.h>
25 
26 #define NOISE_PUBLIC_KEY_LEN CURVE25519_KEY_SIZE
27 #define NOISE_SYMMETRIC_KEY_LEN 32 // CHACHA20POLY1305_KEY_SIZE
28 #define NOISE_TIMESTAMP_LEN (sizeof(uint64_t) + sizeof(uint32_t))
29 #define NOISE_AUTHTAG_LEN 16 //CHACHA20POLY1305_AUTHTAG_SIZE
30 #define NOISE_HASH_LEN BLAKE2S_HASH_SIZE
31 
32 /* Protocol string constants */
33 #define NOISE_HANDSHAKE_NAME "Noise_IKpsk2_25519_ChaChaPoly_BLAKE2s"
34 #define NOISE_IDENTIFIER_NAME "WireGuard v1 zx2c4 Jason@zx2c4.com"
35 
36 /* Constants for the counter */
37 #define COUNTER_BITS_TOTAL 8192
38 #define COUNTER_BITS (sizeof(unsigned long) * 8)
39 #define COUNTER_NUM (COUNTER_BITS_TOTAL / COUNTER_BITS)
40 #define COUNTER_WINDOW_SIZE (COUNTER_BITS_TOTAL - COUNTER_BITS)
41 
42 /* Constants for the keypair */
43 #define REKEY_AFTER_MESSAGES (1ull << 60)
44 #define REJECT_AFTER_MESSAGES (UINT64_MAX - COUNTER_WINDOW_SIZE - 1)
45 #define REKEY_AFTER_TIME 120
46 #define REKEY_AFTER_TIME_RECV 165
47 #define REJECT_AFTER_TIME 180
48 #define REJECT_INTERVAL (0.02) /* fifty times per sec */
49 /* 24 = floor(log2(REJECT_INTERVAL)) */
50 #define REJECT_INTERVAL_MASK (~((1ull<<24)-1))
51 
53 {
54  SC_OK = 0,
58 };
59 
61 {
62  HS_ZEROED = 0,
67 };
68 
69 typedef struct noise_handshake
70 {
72  uint32_t hs_local_index;
73  uint32_t hs_remote_index;
78 
79 typedef struct noise_counter
80 {
81  uint64_t c_send;
82  uint64_t c_recv;
83  unsigned long c_backtrack[COUNTER_NUM];
85 
86 typedef struct noise_keypair
87 {
88  int kp_valid;
90  uint32_t kp_local_index;
91  uint32_t kp_remote_index;
97 
98 typedef struct noise_local noise_local_t;
99 typedef struct noise_remote
100 {
101  uint32_t r_peer_idx;
102  uint8_t r_public[NOISE_PUBLIC_KEY_LEN];
103  uint32_t r_local_idx;
104  uint8_t r_ss[NOISE_PUBLIC_KEY_LEN];
105 
107  uint8_t r_psk[NOISE_SYMMETRIC_KEY_LEN];
108  uint8_t r_timestamp[NOISE_TIMESTAMP_LEN];
110 
112  noise_keypair_t *r_next, *r_current, *r_previous;
114 
115 typedef struct noise_local
116 {
117  uint8_t l_public[NOISE_PUBLIC_KEY_LEN];
118  uint8_t l_private[NOISE_PUBLIC_KEY_LEN];
119 
121  {
122  void *u_arg;
123  noise_remote_t *(*u_remote_get) (const uint8_t[NOISE_PUBLIC_KEY_LEN]);
124  uint32_t (*u_index_set) (noise_remote_t *);
125  void (*u_index_drop) (uint32_t);
126  } l_upcall;
127 } noise_local_t;
128 
129 /* pool of noise_local */
131 
132 /* Set/Get noise parameters */
134 noise_local_get (uint32_t locali)
135 {
136  return (pool_elt_at_index (noise_local_pool, locali));
137 }
138 
139 void noise_local_init (noise_local_t *, struct noise_upcall *);
141  const uint8_t[NOISE_PUBLIC_KEY_LEN]);
142 
143 void noise_remote_init (noise_remote_t *, uint32_t,
144  const uint8_t[NOISE_PUBLIC_KEY_LEN], uint32_t);
145 
146 /* Should be called anytime noise_local_set_private is called */
148 
149 /* Cryptographic functions */
151  uint32_t * s_idx,
152  uint8_t ue[NOISE_PUBLIC_KEY_LEN],
153  uint8_t es[NOISE_PUBLIC_KEY_LEN +
155  uint8_t ets[NOISE_TIMESTAMP_LEN +
157 
159  noise_remote_t **,
160  uint32_t s_idx,
161  uint8_t ue[NOISE_PUBLIC_KEY_LEN],
162  uint8_t es[NOISE_PUBLIC_KEY_LEN +
164  uint8_t ets[NOISE_TIMESTAMP_LEN +
166 
168  uint32_t * s_idx,
169  uint32_t * r_idx,
170  uint8_t ue[NOISE_PUBLIC_KEY_LEN],
171  uint8_t en[0 + NOISE_AUTHTAG_LEN]);
172 
174  uint32_t s_idx,
175  uint32_t r_idx,
176  uint8_t ue[NOISE_PUBLIC_KEY_LEN],
177  uint8_t en[0 + NOISE_AUTHTAG_LEN]);
178 
182 
184 
187  uint32_t * r_idx,
188  uint64_t * nonce,
189  uint8_t * src, size_t srclen, uint8_t * dst);
192  uint32_t r_idx,
193  uint64_t nonce,
194  uint8_t * src, size_t srclen, uint8_t * dst);
195 
196 
197 #endif /* __included_wg_noise_h__ */
198 
199 /*
200  * fd.io coding-style-patch-verification: ON
201  *
202  * Local Variables:
203  * eval: (c-set-style "gnu")
204  * End:
205  */
bool noise_consume_response(vlib_main_t *vm, noise_remote_t *, uint32_t s_idx, uint32_t r_idx, uint8_t ue[NOISE_PUBLIC_KEY_LEN], uint8_t en[0+NOISE_AUTHTAG_LEN])
uint32_t r_local_idx
noise_state_hs
uint32_t hs_local_index
#define NOISE_TIMESTAMP_LEN
#define COUNTER_NUM
noise_state_crypt
#define NOISE_AUTHTAG_LEN
bool noise_remote_begin_session(vlib_main_t *vm, noise_remote_t *r)
void noise_remote_expire_current(noise_remote_t *r)
vl_api_address_t src
Definition: gre.api:54
uint8_t hs_hash[NOISE_HASH_LEN]
uint8_t hs_ck[NOISE_HASH_LEN]
#define NOISE_HASH_LEN
void noise_local_init(noise_local_t *, struct noise_upcall *)
bool noise_create_response(vlib_main_t *vm, noise_remote_t *, uint32_t *s_idx, uint32_t *r_idx, uint8_t ue[NOISE_PUBLIC_KEY_LEN], uint8_t en[0+NOISE_AUTHTAG_LEN])
double f64
Definition: types.h:142
#define static_always_inline
Definition: clib.h:108
uint32_t kp_local_index
vnet_crypto_key_index_t kp_send_index
#define NOISE_PUBLIC_KEY_LEN
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
Definition: pool.h:534
bool noise_consume_initiation(vlib_main_t *vm, noise_local_t *, noise_remote_t **, uint32_t s_idx, uint8_t ue[NOISE_PUBLIC_KEY_LEN], uint8_t es[NOISE_PUBLIC_KEY_LEN+NOISE_AUTHTAG_LEN], uint8_t ets[NOISE_TIMESTAMP_LEN+NOISE_AUTHTAG_LEN])
struct noise_keypair noise_keypair_t
#define NOISE_SYMMETRIC_KEY_LEN
struct noise_remote noise_remote_t
bool noise_create_initiation(vlib_main_t *vm, noise_remote_t *, uint32_t *s_idx, uint8_t ue[NOISE_PUBLIC_KEY_LEN], uint8_t es[NOISE_PUBLIC_KEY_LEN+NOISE_AUTHTAG_LEN], uint8_t ets[NOISE_TIMESTAMP_LEN+NOISE_AUTHTAG_LEN])
void noise_remote_init(noise_remote_t *, uint32_t, const uint8_t[NOISE_PUBLIC_KEY_LEN], uint32_t)
struct noise_handshake noise_handshake_t
vl_api_address_t dst
Definition: gre.api:55
vnet_crypto_key_index_t kp_recv_index
noise_local_t * noise_local_pool
enum noise_state_hs hs_state
void noise_remote_precompute(noise_remote_t *)
enum noise_state_crypt noise_remote_decrypt(vlib_main_t *vm, noise_remote_t *, uint32_t r_idx, uint64_t nonce, uint8_t *src, size_t srclen, uint8_t *dst)
uint32_t r_peer_idx
bool noise_remote_ready(noise_remote_t *)
noise_keypair_t * r_previous
u32 vnet_crypto_key_index_t
Definition: crypto.h:346
uint32_t kp_remote_index
struct noise_counter noise_counter_t
uint32_t hs_remote_index
void noise_remote_clear(vlib_main_t *vm, noise_remote_t *r)
struct noise_local noise_local_t
clib_rwlock_t r_keypair_lock
noise_handshake_t r_handshake
uint8_t hs_e[NOISE_PUBLIC_KEY_LEN]
static_always_inline noise_local_t * noise_local_get(uint32_t locali)
enum noise_state_crypt noise_remote_encrypt(vlib_main_t *vm, noise_remote_t *, uint32_t *r_idx, uint64_t *nonce, uint8_t *src, size_t srclen, uint8_t *dst)
noise_counter_t kp_ctr
bool noise_local_set_private(noise_local_t *, const uint8_t[NOISE_PUBLIC_KEY_LEN])