| /* SPDX-License-Identifier: GPL-2.0 */ | |
| /* | |
| * Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved. | |
| */ | |
| #ifndef _WG_COOKIE_H | |
| #define _WG_COOKIE_H | |
| #include "messages.h" | |
| #include <linux/rwsem.h> | |
| struct wg_peer; | |
| struct cookie_checker { | |
| u8 secret[NOISE_HASH_LEN]; | |
| u8 cookie_encryption_key[NOISE_SYMMETRIC_KEY_LEN]; | |
| u8 message_mac1_key[NOISE_SYMMETRIC_KEY_LEN]; | |
| u64 secret_birthdate; | |
| struct rw_semaphore secret_lock; | |
| struct wg_device *device; | |
| }; | |
| struct cookie { | |
| u64 birthdate; | |
| bool is_valid; | |
| u8 cookie[COOKIE_LEN]; | |
| bool have_sent_mac1; | |
| u8 last_mac1_sent[COOKIE_LEN]; | |
| u8 cookie_decryption_key[NOISE_SYMMETRIC_KEY_LEN]; | |
| u8 message_mac1_key[NOISE_SYMMETRIC_KEY_LEN]; | |
| struct rw_semaphore lock; | |
| }; | |
| enum cookie_mac_state { | |
| INVALID_MAC, | |
| VALID_MAC_BUT_NO_COOKIE, | |
| VALID_MAC_WITH_COOKIE_BUT_RATELIMITED, | |
| VALID_MAC_WITH_COOKIE | |
| }; | |
| void wg_cookie_checker_init(struct cookie_checker *checker, | |
| struct wg_device *wg); | |
| void wg_cookie_checker_precompute_device_keys(struct cookie_checker *checker); | |
| void wg_cookie_checker_precompute_peer_keys(struct wg_peer *peer); | |
| void wg_cookie_init(struct cookie *cookie); | |
| enum cookie_mac_state wg_cookie_validate_packet(struct cookie_checker *checker, | |
| struct sk_buff *skb, | |
| bool check_cookie); | |
| void wg_cookie_add_mac_to_packet(void *message, size_t len, | |
| struct wg_peer *peer); | |
| void wg_cookie_message_create(struct message_handshake_cookie *src, | |
| struct sk_buff *skb, __le32 index, | |
| struct cookie_checker *checker); | |
| void wg_cookie_message_consume(struct message_handshake_cookie *src, | |
| struct wg_device *wg); | |
| #endif /* _WG_COOKIE_H */ |