51 commits

Author	SHA1	Message	Date
Adam Ierymenko	5cf99ecb1d	Tetanus noise xk (#1881) ... * Noise XK work in progress. * A whole lot more Noise_XK work... exchange almost done. * Delete a bunch of commented out old Noise_IK code. * Add back in send() and a few other things to Noise_XK ZSSP. * Some p384 experiment in attic * A ton of ZSSP work, and put MPL on ZSSP. * updated kbkdf512 to use the modern nist standard * Parameterize KBKDF on resulting output key size the way NIST likes. * updated variable comment * Make the label a const parameter on kbkdf. * updated variable comment * Add MPL to utils and other stuff. * layout tweak * Some more ZSSP work and a VDF we may use. * warning removal * More ZSSP work, add benchmarks for mimcvdf. * Almost ready to test... * Build fix. * Add automatic retransmission in the earliest stages of session init. * Just about ready to test... wow. * It opens a session. * ZSSP basically works... --------- Co-authored-by: mamoniot <mamoniot@protonmail.com>	2023-02-28 17:54:08 -05:00
Adam Ierymenko	181eb8ac34	cleanup	2023-01-04 11:09:21 -05:00
Adam Ierymenko	ec600f994a	Add both Valid and Verified typestates.	2023-01-03 17:58:28 -05:00
Adam Ierymenko	382688d251	Generalize typestates, make verified valid because its more correct for Identity.	2023-01-03 15:24:46 -05:00
Adam Ierymenko	e3e4337d2f	Merge, fix secure_eq conflict.	2022-12-21 14:46:53 -05:00
Adam Ierymenko	6517cc0cd1	secure_eq in AES for macOS	2022-12-19 15:49:44 -05:00
mamoniot	9c9510ef36	added secure_eq to a few places	2022-12-19 11:37:31 -05:00
Adam Ierymenko	5114df03d9	Make secure_eq more versatile.	2022-12-19 11:24:40 -05:00
Adam Ierymenko	4db2cfdc8c	constant time EQ function	2022-12-19 10:53:12 -05:00
Adam Ierymenko	9afcc5dda3	cleanup	2022-12-16 15:36:40 -05:00
Adam Ierymenko	611ca97ee4	Post-refactor cleanup, break out some stuff some more in ZSSP.	2022-12-16 09:11:09 -05:00
Adam Ierymenko	452ecdcade	Remove copy of kyber, use from GitHub with commit hash for now until next release.	2022-12-16 08:56:16 -05:00
mamoniot	d3e0de0ad8	fixed aes so it resets instead of reallocating	2022-12-14 18:14:44 -05:00
mamoniot	a7fdc82c5b	switched to use of safer read and write functions	2022-12-14 12:57:10 -05:00
mamoniot	b3b0ef02b9	got to compile	2022-12-14 10:10:16 -05:00
mamoniot	987b0f0769	excised zssp	2022-12-14 10:06:49 -05:00
Adam Ierymenko	035d8203c4	A little cleanup and renaming.	2022-12-13 09:55:21 -05:00
Adam Ierymenko	57badb6e56	Also test AES-GCM decrypt and bad decrypt cases.	2022-12-06 17:54:43 -05:00
Adam Ierymenko	263900ae00	Add AES-GCM test vectors even though aes.rs is just glue... to make sure the glue holds. :)	2022-12-06 17:49:17 -05:00
Adam Ierymenko	52770ddaef	Comment out set_tag_len which is not necessary and seems to crash some OpenSSL versions (are they missing it?)	2022-12-06 11:37:06 -05:00
Adam Ierymenko	7c2e0b8507	Windows fixes... not quite ported yet but almost there.	2022-12-05 16:58:33 -05:00
Adam Ierymenko	330ec11e4a	Vendor openssl for Windows.	2022-12-05 15:57:15 -05:00
Adam Ierymenko	3be8a7aa6f	PPC fix.	2022-12-01 13:15:10 -05:00
Adam Ierymenko	e772292d5e	Fix for test errors on ZSSP.	2022-12-01 12:39:33 -05:00
Adam Ierymenko	e433b670fc	ZSSP comments and cleanup.	2022-12-01 12:03:52 -05:00
Adam Ierymenko	580496cbd7	Some docs, assert AES IV is 96 bits since anything else has security issues.	2022-11-30 09:43:31 -05:00
Adam Ierymenko	7771de0bf7	Merge branch 'tetanus' of github.com:/zerotier/ZeroTierOne into tetanus	2022-11-28 12:44:36 -05:00
Adam Ierymenko	42178d1716	cleanup	2022-11-28 12:44:29 -05:00
Brenton Bostick	40cce9dba6	fix typos in comments	2022-11-28 12:36:51 -05:00
Brenton Bostick	f8351ca47e	fix typos in header comment	2022-11-28 12:36:35 -05:00
Adam Ierymenko	7522282c2e	docs, comments, readable code	2022-11-18 13:41:44 -05:00
Adam Ierymenko	19d973cfd4	(1) Implement typestate Verified for identity, (2) FileDatabase in controller now works.	2022-11-16 21:41:08 -05:00
Adam Ierymenko	68021b8a7f	cleanup	2022-11-14 11:51:55 -05:00
Adam Ierymenko	015abb62e0	Factor out a few more warnings.	2022-11-03 15:38:23 -04:00
Adam Ierymenko	ceaba4f725	Fix some warnings by either factoring out or allowing in one case.	2022-11-03 15:37:12 -04:00
Adam Ierymenko	9e6617b324	More controller work and some ZSSP cleanup.	2022-10-27 15:03:23 -04:00
Adam Ierymenko	23e73bbdd1	cleanup	2022-10-17 12:59:10 -04:00
Adam Ierymenko	5d17c37b65	Remove parking_lot since as of 1.63 Rust std::mutex is usually as good or better.	2022-09-29 15:34:03 -04:00
Adam Ierymenko	768ec6e710	Tons more work: (1) remove async again from the core, (2) controller stuff, (3) retrofit other stuff to handle non-async core.	2022-09-21 16:43:47 -04:00
Adam Ierymenko	7ec46540fa	A ton more reorg work and controller work.	2022-09-20 12:10:05 -04:00
Adam Ierymenko	7724092551	Use 0xffffffffffff as NIL session ID because magic backward compatibility check for ZT protocol.	2022-09-20 12:09:54 -04:00
Adam Ierymenko	b8e65b667c	Build fix, cruft simplification.	2022-09-14 11:03:00 -04:00
Adam Ierymenko	3864ea8150	Fix ZSSP rate limits.	2022-09-14 09:41:40 -04:00
Adam Ierymenko	04b2adcf5f	Dead code removal, perf stuff	2022-09-14 08:59:33 -04:00
Adam Ierymenko	887585f6fa	Some VL1 work, and reorg the header in ZSSP to make backward compatibility easy.	2022-09-13 21:27:47 -04:00
Adam Ierymenko	2649ce7571	A bunch of reorg, and add a safety valve to nuke the send key in ZSSP if it is hard-expired.	2022-09-13 17:27:58 -04:00
Adam Ierymenko	c3466078bf	Move some V1-specific stuff into hypervisor code base.	2022-09-13 12:28:30 -04:00
Adam Ierymenko	d42a70544f	More simplification and move key agreements to as late as possible after session state check.	2022-09-13 11:09:20 -04:00
Adam Ierymenko	a7fa425830	Simplify some logic.	2022-09-13 10:58:18 -04:00
Adam Ierymenko	07fc8b2d2b	rustfmt	2022-09-13 10:48:36 -04:00