securetransport

type ClientHello struct {
	DeviceID     ID16
	ClientPublic [32]byte
	IssuedAt     int64
	ExpiresAt    int64
	Nonce        [16]byte
	ClientBuild  string
	Signature    [64]byte
}

type DeviceRegistrationRequest struct {
	IssuedAt  int64
	Nonce     [16]byte
	PublicKey [32]byte
	Name      string
}

type DeviceRegistrationResponse struct {
	DeviceID  ID16
	CreatedAt int64
}

type Header struct {
	Name  string
	Value string
}

type ID16 [16]byte

type Limits struct {
	MaxBody        int
	MaxHeaders     int
	MaxHeaderName  int
	MaxHeaderValue int
}

type RequestEnvelope struct {
	SessionID  ID16
	RequestID  ID16
	Sequence   uint64
	IssuedAt   int64
	ExpiresAt  int64
	Nonce      [12]byte
	Ciphertext []byte
}

type RequestPayload struct {
	ContentType string
	Headers     []Header
	Body        []byte
}

type ResponseEnvelope struct {
	SessionID  ID16
	RequestID  ID16
	Sequence   uint64
	IssuedAt   int64
	ExpiresAt  int64
	Nonce      [12]byte
	Ciphertext []byte
}

type ResponsePayload struct {
	Status      int
	ContentType string
	Headers     []Header
	Body        []byte
}

type ServerHello struct {
	// ServerPublic is the persistent pinned X25519 public key.
	ServerPublic [32]byte
	// ServerEphemeral is a per-session X25519 public key. Combining both
	// agreements gives server authentication through the pin and forward secrecy
	// after the ephemeral private key is discarded.
	ServerEphemeral [32]byte
	SessionID       ID16
	ServerNonce     [16]byte
	ExpiresAt       int64
	KeyID           string
	Proof           [32]byte
}

type SessionKeys struct {
	ClientToServer [32]byte
	ServerToClient [32]byte
}

type TrustBundle struct {
	Origin                   string
	TransportPublicKey       [X25519KeySize]byte
	TransportKeyID           string
	ResponseSigningPublicKey [Ed25519PublicSize]byte
	ResponseSigningKeyID     string
}