ouroboros - Ouroboros main repository

	Commit message (Collapse)	Author	Age	Files	Lines
*	lib: Fix return value in function returning void	Dimitri Staessens	2020-12-12	1	-1/+1
\| \| \| \| \| \| \|	This causes builds to fail on systems where OpenSSL is not available. Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks> Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
*	lib, ipcpd: piggyback ECDHE on flow allocation	Dimitri Staessens	2020-02-25	1	-120/+77
\| \| \| \| \| \| \| \| \| \| \|	The initial implementation for the ECDHE key exchange was doing the key exchange after a flow was established. The public keys are now sent allowg on the flow allocation messages, so that an encrypted tunnel can be created within 1 RTT. The flow allocation steps had to be extended to pass the opaque data ('piggybacking'). Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks> Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
*	build: Update copyright to 20200.16.0	Dimitri Staessens	2020-01-02	1	-1/+1
\| \| \| \| \|	Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks> Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
*	lib: Fix swapped ECDH crypt calls	Dimitri Staessens	2019-08-09	1	-2/+2
\| \| \| \| \| \| \| \| \| \|	The client and server side were swapped. This wasn't a big issue, but now we are sure that the flow allocation response for the server has arrived at the client (packet reordering could cause the server key to arrive before the flow is allocated at the client). Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks> Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
*	lib: Fix free in key derivation	Dimitri Staessens	2019-08-09	1	-1/+1
\| \| \| \| \| \| \|	The wrong pointer was being free'd in case of a derivation error. Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks> Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
*	lib: Add per-message encryption with OpenSSL	Dimitri Staessens	2019-08-03	1	-0/+490
	This adds a per-message symmetric encryption using the OpenSSL library. At flow allocation, an Elliptic Curve Diffie-Hellman exchange is performed to derive a shared secret, which is then hashed using SHA3-256 to be used as a key for symmetric AES-256 encryption. Each message on an encrypted flow adds a small crypto header that includes a random 128-bit Initialization Vector (IV). If the server does not have OpenSSL enabled, the flow allocation will fail with an -ECRYPT error. Future optimizations are to piggyback the public keys on the flow allocation message, and to enable per-flow encryption that maintains the context of the encryption over multiple packets and doesn't require sending IVs. Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks> Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>