secret_connection.go
func MakeSecretConnection(conn io.ReadWriteCloser, locPrivKey crypto.PrivKeyEd25519) (*SecretConnection, error) {

	locPubKey := locPrivKey.PubKey().(crypto.PubKeyEd25519)

	// Generate ephemeral keys for perfect forward secrecy.
	locEphPub, locEphPriv := genEphKeys()

	// Write local ephemeral pubkey and receive one too.
	// NOTE: every 32-byte string is accepted as a Curve25519 public key
	// (see DJB's Curve25519 paper: http://cr.yp.to/ecdh/curve25519-20060209.pdf)
	remEphPub, err := shareEphPubKey(conn, locEphPub)
	if err != nil {
		return nil, err
	}

	// Compute common shared secret.
	shrSecret := computeSharedSecret(remEphPub, locEphPriv)

	// Sort by lexical order.
	loEphPub, hiEphPub := sort32(locEphPub, remEphPub)

	// Generate nonces to use for secretbox.
	recvNonce, sendNonce := genNonces(loEphPub, hiEphPub, locEphPub == loEphPub)

	// Generate common challenge to sign.
	challenge := genChallenge(loEphPub, hiEphPub)

	// Construct SecretConnection.
	sc := &SecretConnection{
		conn:       conn,
		recvBuffer: nil,
		recvNonce:  recvNonce,
		sendNonce:  sendNonce,
		shrSecret:  shrSecret,
	}

	// Sign the challenge bytes for authentication.
	locSignature := signChallenge(challenge, locPrivKey)

	// Share (in secret) each other's pubkey & challenge signature
	authSigMsg, err := shareAuthSignature(sc, locPubKey, locSignature)
	if err != nil {
		return nil, err
	}
	remPubKey, remSignature := authSigMsg.Key, authSigMsg.Sig
	if !remPubKey.VerifyBytes(challenge[:], remSignature) {
		return nil, errors.New("Challenge verification failed")
	}

	// We've authorized.
	sc.remPubKey = remPubKey.(crypto.PubKeyEd25519)
	return sc, nil
}
func MakeSecretConnection(conn io.ReadWriteCloser, locPrivKey crypto.PrivKeyEd25519) (*SecretConnection, error) {

	locPubKey := locPrivKey.PubKey().(crypto.PubKeyEd25519)

	// Generate ephemeral keys for perfect forward secrecy.
	locEphPub, locEphPriv := genEphKeys()

	// Write local ephemeral pubkey and receive one too.
	// NOTE: every 32-byte string is accepted as a Curve25519 public key
	// (see DJB's Curve25519 paper: http://cr.yp.to/ecdh/curve25519-20060209.pdf)
	remEphPub, err := shareEphPubKey(conn, locEphPub)
	if err != nil {
		return nil, err
	}

	// Compute common shared secret.
	shrSecret := computeSharedSecret(remEphPub, locEphPriv)

	// Sort by lexical order.
	loEphPub, hiEphPub := sort32(locEphPub, remEphPub)

	// Generate nonces to use for secretbox.
	recvNonce, sendNonce := genNonces(loEphPub, hiEphPub, locEphPub == loEphPub)

	// Generate common challenge to sign.
	challenge := genChallenge(loEphPub, hiEphPub)

	// Construct SecretConnection.
	sc := &SecretConnection{
		conn:       conn,
		recvBuffer: nil,
		recvNonce:  recvNonce,
		sendNonce:  sendNonce,
		shrSecret:  shrSecret,
	}

	// Sign the challenge bytes for authentication.
	locSignature := signChallenge(challenge, locPrivKey)

	// Share (in secret) each other's pubkey & challenge signature
	authSigMsg, err := shareAuthSignature(sc, locPubKey, locSignature)
	if err != nil {
		return nil, err
	}
	remPubKey, remSignature := authSigMsg.Key, authSigMsg.Sig
	if !remPubKey.VerifyBytes(challenge[:], remSignature) {
		return nil, errors.New("Challenge verification failed")
	}

	// We've authorized.
	sc.remPubKey = remPubKey.(crypto.PubKeyEd25519)
	return sc, nil
}
func MakeSecretConnection ( conn io . ReadWriteCloser , locPrivKey crypto . PrivKeyEd25519 ) ( * SecretConnection , error ) { locPubKey := locPrivKey . PubKey ( ) . ( crypto . PubKeyEd25519 ) // Generate ephemeral keys for perfect forward secrecy. locEphPub , locEphPriv := genEphKeys ( ) // Write local ephemeral pubkey and receive one too. // NOTE: every 32-byte string is accepted as a Curve25519 public key // (see DJB's Curve25519 paper: http://cr.yp.to/ecdh/curve25519-20060209.pdf) remEphPub , err := shareEphPubKey ( conn , locEphPub ) if err != nil { return nil , err } // Compute common shared secret. shrSecret := computeSharedSecret ( remEphPub , locEphPriv ) // Sort by lexical order. loEphPub , hiEphPub := sort32 ( locEphPub , remEphPub ) // Generate nonces to use for secretbox. recvNonce , sendNonce := genNonces ( loEphPub , hiEphPub , locEphPub == loEphPub ) // Generate common challenge to sign. challenge := genChallenge ( loEphPub , hiEphPub ) // Construct SecretConnection. sc := & SecretConnection { conn : conn , recvBuffer : nil , recvNonce : recvNonce , sendNonce : sendNonce , shrSecret : shrSecret , } // Sign the challenge bytes for authentication. locSignature := signChallenge ( challenge , locPrivKey ) // Share (in secret) each other's pubkey & challenge signature authSigMsg , err := shareAuthSignature ( sc , locPubKey , locSignature ) if err != nil { return nil , err } remPubKey , remSignature := authSigMsg . Key , authSigMsg . Sig if ! remPubKey . VerifyBytes ( challenge [ : ] , remSignature ) { return nil , errors . New ( " " ) } // We've authorized. sc . remPubKey = remPubKey . ( crypto . PubKeyEd25519 ) return sc , nil }
// Performs handshake and returns a new authenticated SecretConnection.
// Returns nil if error in handshake.
// Caller should call conn.Close()
// See docs/sts-final.pdf for more information.
Performs handshake and returns a new authenticated SecretConnection . Returns nil if error in handshake . Caller should call conn . Close () See docs / sts - final . pdf for more information .