Jędrzej Stuczyński
698883c03f
* introduced v2 authentication request between clients and gateways * client to send v2 auth when possible * added persistence to last used authentication timestamp * added clients identity to signed plaintext
56 lines
1.9 KiB
Rust
56 lines
1.9 KiB
Rust
// Copyright 2020-2022 - Nym Technologies SA <contact@nymtech.net>
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
pub use nym_crypto::generic_array;
|
|
use nym_crypto::OutputSizeUser;
|
|
use nym_sphinx::params::GatewayIntegrityHmacAlgorithm;
|
|
|
|
pub use types::*;
|
|
|
|
pub mod authentication;
|
|
pub mod models;
|
|
pub mod registration;
|
|
pub mod shared_key;
|
|
pub mod types;
|
|
|
|
pub use shared_key::helpers::SymmetricKey;
|
|
pub use shared_key::legacy::{LegacySharedKeySize, LegacySharedKeys};
|
|
pub use shared_key::{
|
|
SharedGatewayKey, SharedKeyConversionError, SharedKeyUsageError, SharedSymmetricKey,
|
|
};
|
|
|
|
pub const CURRENT_PROTOCOL_VERSION: u8 = AUTHENTICATE_V2_PROTOCOL_VERSION;
|
|
|
|
/// Defines the current version of the communication protocol between gateway and clients.
|
|
/// It has to be incremented for any breaking change.
|
|
// history:
|
|
// 1 - initial release
|
|
// 2 - changes to client credentials structure
|
|
// 3 - change to AES-GCM-SIV and non-zero IVs
|
|
// 4 - introduction of v2 authentication protocol to prevent reply attacks
|
|
pub const INITIAL_PROTOCOL_VERSION: u8 = 1;
|
|
pub const CREDENTIAL_UPDATE_V2_PROTOCOL_VERSION: u8 = 2;
|
|
pub const AES_GCM_SIV_PROTOCOL_VERSION: u8 = 3;
|
|
pub const AUTHENTICATE_V2_PROTOCOL_VERSION: u8 = 4;
|
|
|
|
// TODO: could using `Mac` trait here for OutputSize backfire?
|
|
// Should hmac itself be exposed, imported and used instead?
|
|
pub type LegacyGatewayMacSize = <GatewayIntegrityHmacAlgorithm as OutputSizeUser>::OutputSize;
|
|
|
|
pub trait GatewayProtocolVersionExt {
|
|
fn supports_aes256_gcm_siv(&self) -> bool;
|
|
fn supports_authenticate_v2(&self) -> bool;
|
|
}
|
|
|
|
impl GatewayProtocolVersionExt for Option<u8> {
|
|
fn supports_aes256_gcm_siv(&self) -> bool {
|
|
let Some(protocol) = *self else { return false };
|
|
protocol >= AES_GCM_SIV_PROTOCOL_VERSION
|
|
}
|
|
|
|
fn supports_authenticate_v2(&self) -> bool {
|
|
let Some(protocol) = *self else { return false };
|
|
protocol >= AUTHENTICATE_V2_PROTOCOL_VERSION
|
|
}
|
|
}
|