wire

type PeerAuthenticator interface {
	// IsPeerValid authenticates the remote peer's credentials, returning true
	// iff the peer is valid.
	IsPeerValid(*PeerCredentials) bool
}

type PeerCredentials struct {
	AdditionalData []byte
	PublicKey      PublicKey
}

type PrivateKey interface {
	encoding.BinaryMarshaler
	encoding.BinaryUnmarshaler
	encoding.TextMarshaler
	encoding.TextUnmarshaler

	// KeyType returns the key type string
	KeyType() string

	// Reset clears the PrivateKey structure such that no sensitive data is left
	// in memory.
	Reset()

	// Bytes returns the raw public key.
	Bytes() []byte

	// FromBytes deserializes the byte slice b into the PrivateKey.
	FromBytes(b []byte) error

	// PublicKey returns the PublicKey corresponding to the PrivateKey.
	PublicKey() PublicKey
}

type PublicKey interface {
	encoding.BinaryMarshaler
	encoding.BinaryUnmarshaler
	encoding.TextMarshaler
	encoding.TextUnmarshaler

	// KeyType returns the key type string
	KeyType() string

	// Reset clears the PublicKey structure such that no sensitive data is left
	// in memory.
	Reset()

	// Equal returns true if the two public keys are equal.
	Equal(PublicKey) bool

	// Bytes returns the raw public key.
	Bytes() []byte

	// FromBytes deserializes the byte slice b into the PublicKey.
	FromBytes(b []byte) error

	// Sum256 returns the Blake2b 256-bit checksum of the key's raw bytes.
	Sum256() [32]byte
}

type Scheme interface {
	// PrivateKeyFromPemFile unmarshals a private key from the PEM file,
	// specified as file path.
	PrivateKeyFromPemFile(f string) (PrivateKey, error)

	// PrivateKeyToPemFile writes the given private key to
	// the specified file path.
	PrivateKeyToPemFile(f string, privKey PrivateKey) error

	// PublicKeyFromPemFile unmarshals a public key from the PEM file,
	// specified as file path.
	PublicKeyFromPemFile(f string) (PublicKey, error)

	// PublicKeyToPemFile writes the given public key to
	// the specified file path.
	PublicKeyToPemFile(f string, pubKey PublicKey) error

	// UnmarshalTextPublicKey loads a public key from text encoded in base64.
	UnmarshalTextPublicKey([]byte) (PublicKey, error)

	// UnmarshalBinaryPublicKey loads a public key from byte slice.
	UnmarshalBinaryPublicKey([]byte) (PublicKey, error)

	// GenerateKeypair generates a new KEM keypair using the provided
	// entropy source.
	GenerateKeypair(r io.Reader) (PrivateKey, PublicKey)

	// PublicKeyFromBytes returns a PublicKey using the provided
	// bytes.
	PublicKeyFromBytes(b []byte) (PublicKey, error)

	// NewEmptyPublicKey returns an empty public key.
	NewEmptyPublicKey() PublicKey
}

type Session struct {
	// contains filtered or unexported fields
}

type SessionConfig struct {
	// Authenticator is the PeerAuthenticator instance that will be used to
	// authenticate the remote peer for the newly created Session.
	Authenticator PeerAuthenticator

	// AdditionalData is the additional data that will be passed to the peer
	// as part of the wire protocol handshake, the length of which MUST be less
	// than or equal to MaxAdditionalDataLength.
	AdditionalData []byte

	// AuthenticationKey is the static long term authentication key used to
	// authenticate with the remote peer.
	AuthenticationKey PrivateKey

	// RandomReader is a cryptographic entropy source.
	RandomReader io.Reader

	// Geometry is the geometry of the Sphinx cryptographic packets
	// that we will use with our wire protocol.
	Geometry *geo.Geometry
}

type SessionInterface interface {
	Initialize(conn net.Conn) error
	SendCommand(cmd commands.Command) error
	RecvCommand() (commands.Command, error)
	Close()
	PeerCredentials() *PeerCredentials
	ClockSkew() time.Duration
}