auth

func DeriveKey ¶

func DeriveKey(password string) ([]byte, error)

DeriveKey uses PBKDF2 to stretch any password to 32 bytes

func DeriveSessionKey ¶

func DeriveSessionKey(key, serverNonce, clientNonce []byte) []byte

DeriveSessionKey creates unique session key from key and nonces SHA mixing is used for easier client implementations

func GenerateKey ¶

func GenerateKey() (string, error)

GenerateKey creates a random 16-char base62 key

func HandleAuthHandshake ¶

func HandleAuthHandshake(r *bufio.Reader, w io.Writer, key []byte, isClient bool) (clientNonce, serverNonce []byte, err error)

HandleAuthHandshake performs the authentication handshake

func IsAuthHandshake ¶

func IsAuthHandshake(r *bufio.Reader) (bool, error)

IsAuthHandshake checks if the next bytes in reader match the handshake magic

func ReadClientNonce ¶

func ReadClientNonce(r io.Reader) (clientNonce []byte, err error)

ReadClientNonce reads client nonce from handshake Expects handshake magic already consumed, reads only the 32-byte nonce

func WrapConn ¶

func WrapConn(conn net.Conn, sessionKey []byte) (net.Conn, error)

func WriteServerHandshake ¶

func WriteServerHandshake(w io.Writer) (serverNonce []byte, err error)

WriteServerHandshake generates server nonce and sends response Sends: "OK\0" + server_nonce[32]