/* Herradura - a Key exchange scheme in the style of Diffie-Hellman Key Exchange. Copyright (C) 2017 Omar Alejandro Herrera Reyna This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . golang implementation by Russ Magee (rmagee_at_gmail.com) */ package herradurakex /* Support functions to set up encryption once an HKEx Conn has been established with FA exchange */ import ( "crypto/aes" "crypto/cipher" "fmt" "math/big" "os" ) const ( C_AES_256 = 0 ) const ( H_SHA256 = 0 ) /*TODO: HMAC derived from HKEx FA.*/ /* Support functionality to set up encryption after a channel has been negotiated via hkexnet.go */ func (hc Conn) getStream(keymat *big.Int, flags uint32) (ret cipher.Stream) { var key []byte var block cipher.Block var err error // 256 algs should be enough for everybody.(tm) cipherAlg := (flags & 8) //TODO: flags for HMAC from keymat switch cipherAlg { case C_AES_256: key = keymat.Bytes()[0:aes.BlockSize] block, err = aes.NewCipher(key) iv := make([]byte, aes.BlockSize) //if _, err = io.ReadFull(crand.Reader, iv); err != nil { // panic(err) //} iv = keymat.Bytes()[aes.BlockSize:] ret = cipher.NewOFB(block, iv) break default: fmt.Println("DOOFUS SET A VALID CIPHER ALG") block, err = nil, nil os.Exit(1) } if err != nil { panic(err) } return }