mirror of
https://github.com/SamTherapy/dnscrypt.git
synced 2024-07-07 23:46:06 +00:00
33 lines
673 B
Go
33 lines
673 B
Go
package xsecretbox
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"golang.org/x/crypto/chacha20"
|
|
"golang.org/x/crypto/curve25519"
|
|
)
|
|
|
|
// SharedKey computes a shared secret compatible with the one used by
|
|
// `crypto_box_xchacha20poly1305`.
|
|
func SharedKey(secretKey [32]byte, publicKey [32]byte) ([32]byte, error) {
|
|
var sharedKey [32]byte
|
|
|
|
sk, err := curve25519.X25519(secretKey[:], publicKey[:])
|
|
if err != nil {
|
|
return sharedKey, err
|
|
}
|
|
|
|
c := byte(0)
|
|
for i := 0; i < 32; i++ {
|
|
sharedKey[i] = sk[i]
|
|
c |= sk[i]
|
|
}
|
|
if c == 0 {
|
|
return sharedKey, errors.New("weak public key")
|
|
}
|
|
var nonce [16]byte
|
|
|
|
key, err := chacha20.HChaCha20(sharedKey[:], nonce[:])
|
|
return *(*[32]byte)(key), err
|
|
}
|