e2ee

type ClientEncryptor struct {
	// contains filtered or unexported fields
}

type Encryptor = ClientEncryptor

type HandshakeManager struct {
	// contains filtered or unexported fields
}

type IdentityKey = KeyPair

type KeyPair struct {
	PublicKey  []byte
	PrivateKey []byte
}

type OneTimePreKey struct {
	KeyPair
	KeyID uint32
}

type PreKeyBundle struct {
	IdentityKey     []byte // public key
	SignedPreKey    []byte // public key
	SignedPreKeyID  uint32
	Signature       []byte // signature of SignedPreKey by IdentityKey
	OneTimePreKey   []byte // public key (optional, nil if consumed)
	OneTimePreKeyID uint32 // 0 if no one-time pre-key
}

type RatchetMessage struct {
	DH         []byte `json:"dh"` // sender's current DH public key
	N          uint32 `json:"n"`  // message number in the sending chain
	PN         uint32 `json:"pn"` // previous chain length
	Ciphertext []byte `json:"ct"` // encrypted message (with AEAD nonce prepended)
}

type RatchetState struct {

	// DH keys
	DHs *KeyPair // sending ratchet key pair

	// Remote peer's current DH public key
	DHr []byte

	// Root key (32 bytes) — updated on every DH ratchet step
	RootKey []byte

	// Sending chain key — KDF'd on each message sent
	CKs []byte

	// Receiving chain key — KDF'd on each message received
	CKr []byte

	// Message counters
	Ns uint32 // sending
	Nr uint32 // receiving
	PN uint32 // number of messages in previous sending chain

	// Skipped message keys: map of (DH public key, counter) -> message key
	// For handling out-of-order messages
	SkippedKeys map[string]map[uint32][]byte

	// Max skipped keys to prevent DoS
	MaxSkipped uint32
	// contains filtered or unexported fields
}

type SignedPreKey struct {
	KeyPair
	KeyID     uint32
	Signature []byte // Ed25519 signature of PublicKey by IdentityKey
}

type SimpleKeyExchange struct {
	// contains filtered or unexported fields
}

type X3DHIdentity struct {
	IdentityKey    *IdentityKey
	SignedPreKey   *SignedPreKey
	OneTimePreKeys map[uint32]*OneTimePreKey // keyID -> key
	// contains filtered or unexported fields
}

type X25519KeyExchange struct {
	// contains filtered or unexported fields
}