Mercurial > hg > nginx

diff src/event/ngx_event_quic_protection.h @ 8221:69345a26ba69 quic

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Split transport and crypto parts into separate files. New files: src/event/ngx_event_quic_protection.h src/event/ngx_event_quic_protection.c The protection.h header provides interface to the crypto part of the QUIC: 2 functions to initialize corresponding secrets: ngx_quic_set_initial_secret() ngx_quic_set_encryption_secret() and 2 functions to deal with packet processing: ngx_quic_encrypt() ngx_quic_decrypt() Also, structures representing secrets are defined there. All functions require SSL connection and a pool, only crypto operations inside, no access to nginx connections or events. Currently pool->log is used for the logging (instead of original c->log).
author Vladimir Homutov <vl@nginx.com>
date Mon, 16 Mar 2020 19:00:47 +0300
parents
children ae35ccba7aa6
line wrap: on
line diff
new file mode 100644
--- /dev/null
+++ b/src/event/ngx_event_quic_protection.h
@@ -0,0 +1,46 @@
+
+/*
+ * Copyright (C) Nginx, Inc.
+ */
+
+
+#ifndef _NGX_EVENT_QUIC_PROTECTION_H_INCLUDED_
+#define _NGX_EVENT_QUIC_PROTECTION_H_INCLUDED_
+
+
+struct ngx_quic_secret_s {
+    ngx_str_t                 secret;
+    ngx_str_t                 key;
+    ngx_str_t                 iv;
+    ngx_str_t                 hp;
+};
+
+
+typedef struct {
+    ngx_quic_secret_t         in;
+    ngx_quic_secret_t         hs;
+    ngx_quic_secret_t         ad;
+} ngx_quic_peer_secrets_t;
+
+
+typedef struct {
+    ngx_quic_peer_secrets_t   client;
+    ngx_quic_peer_secrets_t   server;
+} ngx_quic_secrets_t;
+
+
+ngx_int_t ngx_quic_set_initial_secret(ngx_pool_t *pool,
+    ngx_quic_secrets_t *secrets, ngx_str_t *secret);
+
+int ngx_quic_set_encryption_secret(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
+    enum ssl_encryption_level_t level, const uint8_t *secret, size_t secret_len,
+    ngx_quic_peer_secrets_t *qsec);
+
+ngx_int_t ngx_quic_encrypt(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
+    ngx_quic_header_t *pkt, ngx_str_t *payload, ngx_str_t *res);
+
+ngx_int_t ngx_quic_decrypt(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
+    ngx_quic_header_t *pkt);
+
+
+#endif /* _NGX_EVENT_QUIC_PROTECTION_H_INCLUDED_ */