diff options
Diffstat (limited to 'keypair.go')
-rw-r--r-- | keypair.go | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/keypair.go b/keypair.go new file mode 100644 index 0000000..283cb92 --- /dev/null +++ b/keypair.go @@ -0,0 +1,44 @@ +package main + +import ( + "crypto/cipher" + "sync" + "time" +) + +/* Due to limitations in Go and /x/crypto there is currently + * no way to ensure that key material is securely ereased in memory. + * + * Since this may harm the forward secrecy property, + * we plan to resolve this issue; whenever Go allows us to do so. + */ + +type KeyPair struct { + send cipher.AEAD + receive cipher.AEAD + replayFilter ReplayFilter + sendNonce uint64 + isInitiator bool + created time.Time + localIndex uint32 + remoteIndex uint32 +} + +type KeyPairs struct { + mutex sync.RWMutex + current *KeyPair + previous *KeyPair + next *KeyPair // not yet "confirmed by transport" +} + +func (kp *KeyPairs) Current() *KeyPair { + kp.mutex.RLock() + defer kp.mutex.RUnlock() + return kp.current +} + +func (device *Device) DeleteKeyPair(key *KeyPair) { + if key != nil { + device.indices.Delete(key.localIndex) + } +} |