Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
var ErrPSKTooShort = fmt.Errorf("PSK must be at least %d bytes", smPSKMinLen)
Functions ¶
func WrapPacketConn ¶
func WrapPacketConn(conn net.PacketConn, obfs Obfuscator) net.PacketConn
WrapPacketConn enables obfuscation on a net.PacketConn. The obfuscation is transparent to the caller - the n bytes returned by ReadFrom and WriteTo are the number of original bytes, not after obfuscation/deobfuscation.
Types ¶
type ChameleonObfuscator ¶ added in v0.0.1
type ChameleonObfuscator struct {
PSK []byte // Pre-shared key. Used to derive the actual ChaCha20 key.
}
ChameleonObfuscator implements authenticated encryption using ChaCha20-Poly1305. It derives a unique key for each packet from a pre-shared key (PSK) and a per-packet random nonce. The nonce is prepended to the ciphertext. This provides strong confidentiality and integrity.
func NewChameleonObfuscator ¶ added in v0.0.1
func NewChameleonObfuscator(psk []byte) (*ChameleonObfuscator, error)
NewChameleonObfuscator creates a new ChameleonObfuscator instance. psk: The pre-shared key used to derive the ChaCha20 key. It must not be empty.
func (*ChameleonObfuscator) Deobfuscate ¶ added in v0.0.1
func (o *ChameleonObfuscator) Deobfuscate(in, out []byte) int
Deobfuscate decrypts the input byte slice 'in' and writes the result to 'out'. It extracts the nonce, derives the key, and attempts to decrypt the payload. If decryption fails (e.g., due to data corruption or tampering, indicated by authentication failure), it returns 0 to signal an invalid packet. Returns the number of bytes written to 'out'. If 'in' is invalid or 'out' is too small, returns 0.
func (*ChameleonObfuscator) Obfuscate ¶ added in v0.0.1
func (o *ChameleonObfuscator) Obfuscate(in, out []byte) int
Obfuscate encrypts the input byte slice 'in' and writes the result to 'out'. It generates a random nonce, derives a ChaCha20 key from the PSK, encrypts 'in' with the nonce, and prepends the nonce to the resulting ciphertext (which includes the auth tag). Returns the number of bytes written to 'out'. If 'out' is too small, returns 0.
type NebulaObfuscator ¶ added in v0.0.2
type NebulaObfuscator struct {
PSK []byte // Pre-shared key for AES key derivation and header obfuscation
// contains filtered or unexported fields
}
NebulaObfuscator fragments payload into small, individually encrypted chunks, and manages their chaotic transmission (simulated here by output order).
func NewNebulaObfuscator ¶ added in v0.0.2
func NewNebulaObfuscator(psk []byte) (*NebulaObfuscator, error)
NewNebulaObfuscator creates a new NebulaObfuscator instance. psk: The pre-shared key. Must be at least nebulaMinPSKLen bytes long.
func (*NebulaObfuscator) Deobfuscate ¶ added in v0.0.2
func (o *NebulaObfuscator) Deobfuscate(in, out []byte) int
Deobfuscate reconstructs and decrypts the payload from a sequence of Nebula fragments. It requires all fragments for a given PacketID to be present for successful reconstruction. Returns the length of the decrypted data, or 0 if an error occurs (e.g., missing fragments, decryption failure).
func (*NebulaObfuscator) Obfuscate ¶ added in v0.0.2
func (o *NebulaObfuscator) Obfuscate(in, out []byte) int
Obfuscate fragments the input 'in', encrypts each fragment, and prepares them for chaotic sending. This function returns a single large byte slice that conceptually represents a sequence of packets. In a real implementation, each fragment would be a separate packet, potentially with randomized delays. Returns the total length of the combined obfuscated fragments, or 0 if an error occurs or 'out' is too small.
type Obfuscator ¶
Obfuscator is the interface that wraps the Obfuscate and Deobfuscate methods. Both methods return the number of bytes written to out. If a packet is not valid, the methods should return 0.
func NewObfuscatorFromConfig ¶ added in v0.0.1
func NewObfuscatorFromConfig(cfg ObfuscatorConfig) (Obfuscator, error)
NewObfuscatorFromConfig is a factory function that creates and returns an Obfuscator interface instance based on the provided configuration. It centralizes the instantiation logic for different obfuscation protocols.
type ObfuscatorConfig ¶ added in v0.0.1
type ObfuscatorConfig struct {
Type string `mapstructure:"type"` // Type of the obfuscator (e.g., "salamander", "scramble", "chameleon", "stealthflow", "quantumshuffle")
Password string `mapstructure:"password"` // Pre-shared key/password used by the obfuscator
}
ObfuscatorConfig defines the common configuration structure for all obfuscators. This allows for unified configuration parsing.
type PolyMorphObfuscator ¶ added in v0.0.2
type PolyMorphObfuscator struct {
PSK []byte // Pre-shared key for AES key derivation and control header obfuscation
// contains filtered or unexported fields
}
PolyMorphObfuscator applies multiple layers of obfuscation with dynamic padding. It encrypts the payload with AES-GCM and inserts random padding, with layout info encoded in an obfuscated control header.
func NewPolyMorphObfuscator ¶ added in v0.0.2
func NewPolyMorphObfuscator(psk []byte) (*PolyMorphObfuscator, error)
NewPolyMorphObfuscator creates a new PolyMorphObfuscator instance. psk: The pre-shared key. Must be at least pmMinPSKLen bytes long.
func (*PolyMorphObfuscator) Deobfuscate ¶ added in v0.0.2
func (o *PolyMorphObfuscator) Deobfuscate(in, out []byte) int
Deobfuscate reconstructs and decrypts the payload from a PolyMorph packet. It first de-obfuscates the control header to determine the packet layout, then extracts the nonce and encrypted payload for decryption. Returns the length of the decrypted data, or 0 if an error occurs (e.g., invalid format, decryption failure).
func (*PolyMorphObfuscator) Obfuscate ¶ added in v0.0.2
func (o *PolyMorphObfuscator) Obfuscate(in, out []byte) int
Obfuscate encrypts the input 'in' and applies dynamic padding and a control header. Returns the total length of the obfuscated packet, or 0 if an error occurs or 'out' is too small.
type QuantumShuffleObfuscator ¶ added in v0.0.2
type QuantumShuffleObfuscator struct {
PSK []byte // Pre-shared key for AES key derivation and control header obfuscation
// contains filtered or unexported fields
}
QuantumShuffleObfuscator implements authenticated encryption with dynamic packet layout. It uses AES-GCM and random padding, with layout information encoded in an obfuscated control header.
func NewQuantumShuffleObfuscator ¶ added in v0.0.2
func NewQuantumShuffleObfuscator(psk []byte) (*QuantumShuffleObfuscator, error)
NewQuantumShuffleObfuscator creates a new QuantumShuffleObfuscator instance. psk: The pre-shared key. Must be at least qsMinPSKLen bytes long.
func (*QuantumShuffleObfuscator) Deobfuscate ¶ added in v0.0.2
func (o *QuantumShuffleObfuscator) Deobfuscate(in, out []byte) int
Deobfuscate reconstructs and decrypts the payload from a QuantumShuffle packet. It first de-obfuscates the control header to determine the packet layout, then extracts the nonce and encrypted payload for decryption. Returns the length of the decrypted data, or 0 if an error occurs (e.g., invalid format, decryption failure).
func (*QuantumShuffleObfuscator) Obfuscate ¶ added in v0.0.2
func (o *QuantumShuffleObfuscator) Obfuscate(in, out []byte) int
Obfuscate encrypts the input 'in' and shuffles its internal structure. It generates random padding and a magic number, and encodes their positions in an obfuscated control header. Returns the total length of the obfuscated packet, or 0 if an error occurs or 'out' is too small.
type SalamanderObfuscator ¶
type SalamanderObfuscator struct {
PSK []byte
RandSrc *rand.Rand
// contains filtered or unexported fields
}
SalamanderObfuscator is an obfuscator that obfuscates each packet with the BLAKE2b-256 hash of a pre-shared key combined with a random salt. Packet format: [8-byte salt][payload]
func NewSalamanderObfuscator ¶
func NewSalamanderObfuscator(psk []byte) (*SalamanderObfuscator, error)
func (*SalamanderObfuscator) Deobfuscate ¶
func (o *SalamanderObfuscator) Deobfuscate(in, out []byte) int
func (*SalamanderObfuscator) Obfuscate ¶
func (o *SalamanderObfuscator) Obfuscate(in, out []byte) int
type ScrambleObfuscator ¶ added in v0.0.1
type ScrambleObfuscator struct {
PSK []byte // Pre-shared key for key derivation
}
ScrambleObfuscator implements a simple counter-based stream cipher obfuscation. It uses a per-packet random nonce and a pre-shared key (PSK) to derive an evolving key stream for each block of the packet.
func NewScrambleObfuscator ¶ added in v0.0.1
func NewScrambleObfuscator(psk []byte) (*ScrambleObfuscator, error)
NewScrambleObfuscator creates a new ScrambleObfuscator instance. psk: The pre-shared key used for obfuscation. It must not be empty.
func (*ScrambleObfuscator) Deobfuscate ¶ added in v0.0.1
func (o *ScrambleObfuscator) Deobfuscate(in, out []byte) int
Deobfuscate deobfuscates the input byte slice 'in' and writes the result to 'out'. It extracts the nonce, re-derives the same evolving key stream, and XORs the payload to restore the original data. Returns the number of bytes written to 'out'. If 'in' is invalid or 'out' is too small, returns 0.
func (*ScrambleObfuscator) Obfuscate ¶ added in v0.0.1
func (o *ScrambleObfuscator) Obfuscate(in, out []byte) int
Obfuscate obfuscates the input byte slice 'in' and writes the result to 'out'. It prepends a random nonce, then XORs payload blocks with an evolving key derived from the PSK and the current nonce counter. Returns the number of bytes written to 'out'. If 'out' is too small, returns 0.
type TimeWarpObfuscator ¶ added in v0.0.2
type TimeWarpObfuscator struct {
PSK []byte // Pre-shared key for AES key derivation and control header obfuscation
// contains filtered or unexported fields
}
TimeWarpObfuscator fragments a packet, encrypts chunks, and shuffles their order. A control header guides reconstruction.
func NewTimeWarpObfuscator ¶ added in v0.0.2
func NewTimeWarpObfuscator(psk []byte) (*TimeWarpObfuscator, error)
NewTimeWarpObfuscator creates a new TimeWarpObfuscator instance. psk: The pre-shared key. Must be at least twMinPSKLen bytes long.
func (*TimeWarpObfuscator) Deobfuscate ¶ added in v0.0.2
func (o *TimeWarpObfuscator) Deobfuscate(in, out []byte) int
Deobfuscate reconstructs and decrypts the payload from a TimeWarp packet. It first de-obfuscates the control header to determine chunking and order, then decrypts and reorders the chunks to reconstruct the original payload. Returns the length of the decrypted data, or 0 if an error occurs (e.g., invalid format, decryption failure).
func (*TimeWarpObfuscator) Obfuscate ¶ added in v0.0.2
func (o *TimeWarpObfuscator) Obfuscate(in, out []byte) int
Obfuscate fragments the input 'in', encrypts and shuffles chunks, and adds a control header. Returns the total length of the obfuscated packet, or 0 if an error occurs or 'out' is too small.
Source Files
Directories