fastd

fastd/fastd

Fork 0

mirror of https://github.com/neocturne/fastd.git synced 2025-05-15 12:45:09 +02:00

Commit graph

f5127d2231 Use HKDF for handshake keys as well Matthias Schiffer 2013-11-01 01:21:19 +01:00
4594bcfb83 Use HKDF to derive the session keys Matthias Schiffer 2013-11-01 01:02:44 +01:00
f0de72ae8d Add missing const attribute to secret argument of the session init functions Matthias Schiffer 2013-11-01 00:59:13 +01:00
310cc1260f Implement new session init API Matthias Schiffer 2013-11-01 00:25:06 +01:00
542861816d Implement HKDF Matthias Schiffer 2013-10-31 23:11:00 +01:00
66a953a83f ec25519-fhmqvc: generate compat keys only when needed Matthias Schiffer 2013-10-31 05:59:13 +01:00
f6c37dc0ea ec25519-fhmqvc: don't use separate keypairs as initiator and responder Matthias Schiffer 2013-10-31 05:41:00 +01:00
448abc56cd Revert "ec25519-fhmqvc: make the new shared handshake key two hashes long (only the first half is used for now)" Matthias Schiffer 2013-10-31 04:53:19 +01:00
cfc057a7e8 ec25519-fhmqvc: make the new shared handshake key two hashes long (only the first half is used for now) Matthias Schiffer 2013-10-31 04:45:11 +01:00
738fbdecdc ec25519-fhmqvc: add a new shared handshake key field (which is equivalent to the compat one for now) Matthias Schiffer 2013-10-31 03:13:11 +01:00
40ad5f5fcc More compat renaming Matthias Schiffer 2013-10-31 03:07:19 +01:00
6e7882ebd4 ec25519-fhmqvc: some more refactoring Matthias Schiffer 2013-10-31 02:35:29 +01:00
39db0b8278 ec25519-fhmqvc: some more handshake refactoring Matthias Schiffer 2013-10-31 01:41:31 +01:00
58ec26f6b7 Rename session_init to session_init_compat to prepare for the upcoming new key derivation scheme Matthias Schiffer 2013-10-31 01:28:22 +01:00
763401c89d Change error subcode for unsupported method from method name to method list Matthias Schiffer 2013-10-31 01:03:48 +01:00
467d1f15ea Don't delay initial handshakes when no peer limit is set Matthias Schiffer 2013-10-31 00:09:52 +01:00
6f7106a755 ec25519-fhmqvc: get rid of duplicate code in shared handshake key generation Matthias Schiffer 2013-10-30 23:48:04 +01:00
63b97e9a73 ec25519-fhmqvc: include either T or TLV_MAC in handshake finish, but not both Matthias Schiffer 2013-10-30 22:59:13 +01:00
601efec8e9 Add fastd_handshake_add_zero function Matthias Schiffer 2013-10-30 22:41:20 +01:00
658c83870a ec25519-fhmqvc: add secure_handshake helper function Matthias Schiffer 2013-10-30 22:35:17 +01:00
19bdfda6a2 Separate ec25519-fhmqvc into multiple source files Matthias Schiffer 2013-10-30 19:46:43 +01:00
641422da88 Correctly terminate method list Matthias Schiffer 2013-10-29 21:48:13 +01:00
020bb327dd Rename fastd_parse_method_name to fastd_method_get_by_name Matthias Schiffer 2013-10-29 20:47:17 +01:00
8df7ea375d Generate method list automagically Matthias Schiffer 2013-10-29 20:28:26 +01:00
96a14063ce config: iterate over configured methods only in configure_method_parameters() Matthias Schiffer 2013-10-29 19:09:55 +01:00
c13bdcefe7 handshake: get_method() code simplification Matthias Schiffer 2013-10-29 18:26:34 +01:00
72e3f6532a Drop compatiblity code for fastd 0.4 Matthias Schiffer 2013-10-29 17:00:38 +01:00
4356714142 Handle methods as strings Matthias Schiffer 2013-10-29 15:33:14 +01:00
bb324029ad Allow using libsodium instead of NaCl Matthias Schiffer 2013-10-29 03:45:34 +01:00
fc8c8d82f0 Unify duplicate code in xsalsa20-poly1305 and aes128-gcm methods Matthias Schiffer 2013-10-28 18:27:10 +01:00
095ca93d81 Organize method and protocol source files into distinct source directories Matthias Schiffer 2013-10-28 16:59:42 +01:00
5f6177e00f Fix maybe-uninitialized warning Matthias Schiffer 2013-10-24 21:02:53 +02:00
004ae15c55 Don't print fastd version from handshake requests when secure handshakes are set, instead print it on handshake finish Matthias Schiffer 2013-10-20 20:18:26 +02:00
115de59c32 Warn when no encryption method is set Matthias Schiffer 2013-10-20 19:17:49 +02:00
78c5d1284c Don't send chosen method name when it doesn't matter Matthias Schiffer 2013-10-20 17:08:04 +02:00
b3c602a025 Align handshake buffer Matthias Schiffer 2013-10-20 03:03:05 +02:00
90eeceb9ed Always check for mode and protocol mismatches Matthias Schiffer 2013-10-20 02:55:38 +02:00
8cbd59792e Refactor handshake code, prevent downgrade attacks Matthias Schiffer 2013-10-20 02:37:04 +02:00
e4afa04870 Rename RECORD_HANDSHAKE_MAC to RECORD_TLV_MAC Matthias Schiffer 2013-10-19 18:09:44 +02:00
18a3a6468e Authenticate the TLV records only Matthias Schiffer 2013-10-19 17:57:23 +02:00
0ce0b04490 Use the rsv2 field in the handshake header as an optional length field to facilitate future extensions Matthias Schiffer 2013-10-19 17:37:09 +02:00
c03f985b99 Get rid of packet.h Matthias Schiffer 2013-10-19 17:12:49 +02:00
7982387d5f Add a HMAC to authenticate all handshake TLV Matthias Schiffer 2013-10-19 15:54:46 +02:00
6d8aa57c02 Generalize SHA256 functions to work with arbitrary inputs Matthias Schiffer 2013-10-18 16:18:20 +02:00
5a025b23be Use the default delay before a handshake is sent when the local address is invalid Matthias Schiffer 2013-10-17 00:12:15 +02:00
8ff7026b0e Add `secure handshakes' option (without effect for now) Matthias Schiffer 2013-10-16 20:37:16 +02:00
118ebb9d65 Initiate handshake when a packet can't be sent because the local address is invalid Matthias Schiffer 2013-10-16 18:33:51 +02:00
4c188ac861 Fix fast roaming when local IP address has changed Matthias Schiffer 2013-10-16 12:07:45 +02:00
ecebe8a755 New development cycle Matthias Schiffer 2013-10-16 12:07:32 +02:00
84e3d7a16b fastd v10 v10 Matthias Schiffer 2013-10-11 16:32:12 +02:00
4a7d1acb59 Fix source address choice for IPv4 on Linux Matthias Schiffer 2013-10-04 09:10:03 +02:00
9d950241cd Invalidate null sessions when they are superseded Matthias Schiffer 2013-09-30 22:15:54 +02:00
6ed43cdc22 fastd v9 v9 Matthias Schiffer 2013-09-07 17:30:46 +02:00
467cc0f6c2 Change directory to / when privileges are dropped or the user is changed Matthias Schiffer 2013-09-06 17:13:34 +02:00
02c1cb4ce2 Add packet/byte statistics Matthias Schiffer 2013-09-03 21:53:45 +02:00
f0fa4e0c90 Demote some sendmsg warnings to debug and debug2 levels Matthias Schiffer 2013-08-30 12:57:25 +02:00
7f33ccb920 Don't initialize monotone timestamps with zero Matthias Schiffer 2013-08-29 19:04:31 +02:00
620f1cd45f Replace old task queue Matthias Schiffer 2013-08-29 11:53:34 +02:00
dcaf41a18e Simplify keepalive sending Matthias Schiffer 2013-08-28 23:34:55 +02:00
2343f5329c ec25519: ensure old sessions are invalidated quickly after a new one has been established Matthias Schiffer 2013-08-28 19:54:11 +02:00
6e63479b03 Remote unused fastd_task_replace_peer() Matthias Schiffer 2013-08-28 15:50:37 +02:00
72b8ec6a93 ec25519: ensure that there is always a handshake enqueued after sending a handshake finish Matthias Schiffer 2013-08-28 15:00:24 +02:00
1b9709bae3 ec25519: reset peers as soon as their current session times out Matthias Schiffer 2013-08-28 14:46:03 +02:00
3a3d423920 Cancel the session establishment earlier when the address can't be claimed by the peer Matthias Schiffer 2013-08-28 14:13:44 +02:00
738639cf71 Introduce constants for tristate values Matthias Schiffer 2013-08-28 13:39:18 +02:00
81bff2df03 Introduce new log level debug2 for potentially very frequent messages Matthias Schiffer 2013-08-27 17:57:06 +02:00
e91f17de87 options: change config error' to command line error' messages Matthias Schiffer 2013-08-26 14:57:39 +02:00
81a329682b ec25519-fhmqvc: use different handshake keys as initiator and responder Matthias Schiffer 2013-08-25 21:20:18 +02:00
464b4ed42e ec25519-fhmqvc: put public and secret keys together in a keypair structure Matthias Schiffer 2013-08-25 20:45:33 +02:00
9aff9fc56e Fix typo in systemd unit description Matthias Schiffer 2013-08-21 11:33:32 +02:00
4d2db5dbd2 OpenBSD doesn't support IPv4 on IPv6 sockets Matthias Schiffer 2013-08-20 16:50:51 +02:00
d52f208d9f Use v4-mapped addresses for IPv4 peers on IPv6 sockets Matthias Schiffer 2013-08-20 16:16:55 +02:00
f6640a80f4 Prevent zero-before-free operations from being optimized out Matthias Schiffer 2013-08-20 06:52:03 +02:00
d9dc87d840 Fix lots of -Wextra warnings Matthias Schiffer 2013-08-20 06:02:29 +02:00
3fd947a2d1 ec25519: add alignment attributes to all keys used as hash inputs Matthias Schiffer 2013-08-19 03:31:57 +02:00
28c9b536f4 ec25519: reorder some code to fix a false-positive "may be used uninitialized" warning Matthias Schiffer 2013-08-19 02:56:37 +02:00
ca94908db5 ec25519: minor code simplifications in handshake handling Matthias Schiffer 2013-08-18 12:14:51 +02:00
efa0a3607f Cache values calculated in the handshake reponse to reuse them in the finish handling Matthias Schiffer 2013-08-17 10:54:21 +02:00
49cb21b22d Make handshake records const uint8_t* instead of void* Matthias Schiffer 2013-08-17 10:22:15 +02:00
00d7406fe2 Slightly improve the SHA256 API Matthias Schiffer 2013-08-17 09:37:27 +02:00
f12681b09b Check closedir return value Matthias Schiffer 2013-08-17 02:49:53 +02:00
1ebbf81c00 Use readdir instead of readdir_r Matthias Schiffer 2013-08-17 02:34:44 +02:00
c2dd57d208 lex: fix scanning of IPv6 addresses Matthias Schiffer 2013-08-16 06:24:48 +02:00
cab67b91b8 Fix segfault on single peer includes without name Matthias Schiffer 2013-08-16 05:45:01 +02:00
0565d0e843 Always compile with -Wall (and fix other property settings) Matthias Schiffer 2013-08-15 07:07:42 +02:00
d6b829effe Don't require NaCl when it is not used Matthias Schiffer 2013-08-15 06:54:32 +02:00
d6085504ce Align sender key Matthias Schiffer 2013-08-15 04:03:44 +02:00
1bb34487bf Replace NaCl's HMAC implementation Matthias Schiffer 2013-08-15 02:44:26 +02:00
6ecf69b6e6 Add small SHA256 implementation Matthias Schiffer 2013-08-15 01:18:51 +02:00
e10944f8c9 Allow disabling redundant command line options Matthias Schiffer 2013-08-14 19:12:45 +02:00
5ebebb3688 Change the order of the option handlers to match the option definion Matthias Schiffer 2013-08-14 18:55:11 +02:00
0c6f6e9242 Reorder command line options in usage message and add separating empty lines Matthias Schiffer 2013-08-14 18:49:27 +02:00
61cc8fdedc lex: don't check for NULL before free Matthias Schiffer 2013-08-14 04:44:31 +02:00
9929ac9123 lex: various fixes Matthias Schiffer 2013-08-14 02:02:11 +02:00
bf721f718e Implement new lexer that is not generated by flex to reduce code size Matthias Schiffer 2013-08-14 01:19:33 +02:00
cd0f973cf6 lexer: reduce code size Matthias Schiffer 2013-08-13 19:00:00 +02:00
88d6f0be57 lexer: simplify whitespace handling Matthias Schiffer 2013-08-13 18:16:50 +02:00
4a65989064 lexer: simplify IPv6 address matching Matthias Schiffer 2013-08-13 18:05:26 +02:00
d468ffff45 Add pre-up and post-down handlers Matthias Schiffer 2013-08-12 18:54:16 +02:00
78de22fd21 Improve interface name handling Matthias Schiffer 2013-08-12 18:18:26 +02:00