core

type CipherSuite struct {
	Scheme   int
	EccType  EccTypeEnum
	HashType HashTypeEnum
	GcmType  GcmTypeEnum
}

type ConnectionData struct {
	// atomic data, keep 64bit(8-bytes) alignment for 32-bit system compatibility
	InitTime           int64 // local connection setup time. immutable after created
	LastRemoteSendTime int64
	LastLocalSendTime  int64
	LastLocalRecvTime  int64

	sync.Mutex
	sync.WaitGroup

	// common
	Device           *Device
	LocalAddr        *net.UDPAddr
	RemoteAddr       *net.UDPAddr
	CookieStore      *CookieStore
	TimeoutMs        int
	SendQueue        chan *Packet
	RecvQueue        chan *Packet
	BlockSignal      chan struct{}
	SetTimeoutSignal chan struct{}
	StopSignal       chan struct{}

	// remote transactions
	RemoteTransactionMutex sync.Mutex
	RemoteTransactionMap   map[uint64]*RemoteTransaction

	// specific
	RecvThreatCount int32
	// contains filtered or unexported fields
}

type CookieStore struct {
	CurrCookie     [CookieSize]byte
	PrevCookie     [CookieSize]byte
	LastCookieTime int64
}

type Device struct {
	Overload atomic.Bool

	DecryptedMsgQueue chan *PacketParserData
	// contains filtered or unexported fields
}

type DeviceOptions struct {
	DisableAgentPeerValidation  bool
	DisableServerPeerValidation bool
	DisableACPeerValidation     bool
	DisableRelayPeerValidation  bool
	DisableDePeerValidation     bool
}

type DeviceTypeEnum = int

type EccTypeEnum int

type Ecdh interface {
	SetPrivateKey(prk []byte) error
	PrivateKey() []byte
	PublicKey() []byte
	SharedSecret(pbk []byte) []byte
	Name() string
	PrivateKeyBase64() string
	PublicKeyBase64() string
	Identity() []byte
	MidPublicKey() []byte
}

type Error struct {
	// contains filtered or unexported fields
}

type GcmTypeEnum int

type HashTypeEnum int

type Header interface {
	SetTypeAndPayloadSize(int, int)
	TypeAndPayloadSize() (int, int)
	Size() int
	SetVersion(int, int)
	Version() (int, int)
	SetFlag(uint16)
	Flag() uint16
	SetCounter(uint64)
	Counter() uint64
	Bytes() []byte
	NonceBytes() []byte
	EphermeralBytes() []byte
	StaticBytes() []byte
	TimestampBytes() []byte
	IdentityBytes() []byte
	HMACBytes() []byte
}

type InitiatorScheme interface {
	CreateMsgAssemblerData(d *Device, md *MsgData) (mad *MsgAssemblerData, err error)
	DeriveMsgAssemblerDataFromPrevParserData(ppd *PacketParserData, t int, message []byte) (mad *MsgAssemblerData)
	SetPeerPublicKey(d *Device, mad *MsgAssemblerData, peerPk []byte) (err error)
	EncryptBody(d *Device, mad *MsgAssemblerData) (err error)
}

type LocalTransaction struct {
	NextPacketCh  chan *Packet           // higher level entities should redirect packet to this channel
	ExternalMsgCh chan *PacketParserData // a channel to receive an external msg to complete the transaction
	// contains filtered or unexported fields
}

type MsgAssemblerData struct {
	BasePacket *Packet

	LocalInitTime int64
	TransactionId uint64

	CipherScheme int
	HeaderType   int
	BodySize     int
	HeaderFlag   uint16
	BodyCompress bool

	ExternalCookie *[CookieSize]byte
	RemotePubKey   []byte

	ResponseMsgCh chan<- *PacketParserData
	Error         error
	// contains filtered or unexported fields
}

type MsgData struct {
	RemoteAddr     *net.UDPAddr      // used by agent and ac create a new connection or pick an existing connection for msg sending
	ConnData       *ConnectionData   // used by server to pick an existing connection for msg sending
	PrevParserData *PacketParserData // when PrevParserData is set, CipherScheme, RemoteAddr, ConnData, TransactionId and PeerPk will be overridden
	CipherScheme   int               // 0: curve25519/chacha20/blake2s, 1: sm2/sm4/sm3
	TransactionId  uint64
	HeaderType     int
	Compress       bool
	ExternalPacket *Packet
	ExternalCookie *[CookieSize]byte
	Message        []byte
	PeerPk         []byte
	EncryptedPktCh chan *MsgAssemblerData
	ResponseMsgCh  chan *PacketParserData
}

type NhpError interface {
	Error() string
	ErrorCode() string
	ErrorNumber() int
}

type NoiseFactory struct {
	HashType HashTypeEnum
}

type Packet struct {
	Buf           *PacketBuffer
	HeaderType    int
	PoolAllocated bool
	KeepAfterSend bool // only applicable for sending
	Content       []byte
}

type PacketBuffer = [PacketBufferSize]byte

type PacketBufferPool struct {
	// contains filtered or unexported fields
}

type PacketData struct {
	BasePacket             *Packet
	ConnData               *ConnectionData
	PrevAssemblerData      *MsgAssemblerData
	ConnLastRemoteSendTime *int64
	ConnCookieStore        *CookieStore
	ConnPeerPublicKey      *[PublicKeySizeEx]byte
	InitTime               int64
	DecryptedMsgCh         chan *PacketParserData
}

type PacketParserData struct {
	ConnData     *ConnectionData
	CipherScheme int
	Ciphers      *CipherSuite

	LocalInitTime int64
	SenderTrxId   uint64

	HeaderType   int
	BodySize     int
	HeaderFlag   uint16
	BodyCompress bool
	Overload     bool

	SenderIdentity         []byte
	SenderMidPublicKey     []byte
	ConnLastRemoteSendTime *int64
	ConnCookieStore        *CookieStore
	ConnPeerPublicKey      *[PublicKeySizeEx]byte
	RemotePubKey           []byte
	BodyMessage            []byte

	Error error
	// contains filtered or unexported fields
}

type Peer interface {
	DeviceType() int
	Name() string
	PublicKey() []byte
	PublicKeyBase64() string

	IsExpired() bool

	HostOrAddr() string
	SendAddr() net.Addr
	LastSendTime() int64
	UpdateSend(currTime int64)

	RecvAddr() net.Addr
	LastRecvTime() int64
	UpdateRecv(currTime int64, currAddr net.Addr)
	CheckRecvAddress(currTime int64, currAddr net.Addr) bool
}

type RemoteTransaction struct {
	NextMsgCh chan *MsgData // higher level entities should redirect message to this channel
	// contains filtered or unexported fields
}

type ResponderScheme interface {
	CreatePacketParserData(d *Device, pd *PacketData) (ppd *PacketParserData, err error)
	DerivePacketParserDataFromPrevAssemblerData(mad *MsgAssemblerData, pkt *Packet, initTime int64) (ppd *PacketParserData)
	// contains filtered or unexported methods
}

type UdpPeer struct {
	sync.Mutex

	// immutable fields. Don't change them after creation
	PubKeyBase64 string `json:"pubKeyBase64"`
	Hostname     string `json:"host,omitempty"`
	Ip           string `json:"ip"`
	Port         int    `json:"port"`
	Type         int    `json:"type"`
	ExpireTime   int64  `json:"expireTime"`
	// contains filtered or unexported fields
}

type Ztdo struct {
	Header    ZtdoHeader
	Payload   ZtdoPayload
	Signature ZtdoSignature
}

type ZtdoFile struct {
	Objectid    string `json:"objectid"`    //UUID
	FileName    string `json:"fileName"`    //Source filename, e.g., test.txt
	FileExt     string `json:"fileExt"`     //Source file extension, e.g., .txt
	FileContent []byte `json:"fileContent"` //Encrypted file content, e.g., U2FsdGVkX1...
	CreateDate  string `json:"createDate"`  //Creation Date
	Owner       string `json:"owner"`
	Keywords    string `json:"keywords"`
	Description string `json:"description"`
}

type ZtdoHeader struct {
	Typeid          [4]byte      // Type identifier of ZTDO
	Objectid        string       // ZTDO Data Object Identifier
	Version         [2]byte      // Version Number
	PayloadOffset   [2]byte      // The offset relative to the starting address is the starting address of IV.
	PayloadLength   [8]byte      // The total length of the Payload data item, including IV, ciphertext, and MAC
	SignatureLength [2]byte      // The length is the length of the data after the signature data structure ASN.1 encoding
	ECC_Bind_Mode   [1]byte      // Indicates whether the data used for the elliptic curve parameter and policy binding is a GMAC tag or an ECDSA signature
	SigConfig       [1]byte      // Indicates the data encryption algorithm and data signature algorithm of the Payload
	MetaInfo        ZtdoMetaInfo // Meta information
}

type ZtdoMetaInfo struct {
	FileName    string `json:"fileName"`    //Source filename, e.g., test.txt
	FileExtName string `json:"FileExtName"` //Source file extension, e.g., .txt
	Owner       string `json:"owner"`
	Keywords    string `json:"keywords"`
	Description string `json:"description"`
}

type ZtdoPayload struct {
	IV        [16]byte // Initialization Vector (IV)
	Ciphertxt []byte   // Encrypted payload data
	MAC       [16]byte // Message Authentication Code (MAC)
}

type ZtdoSignature struct {
	SignerId          []byte // Signer ID
	DomainId          []byte // Domain ID
	DeclaredPublicKey []byte // Public Key Declaration
	Sig               []byte //Signature Data
}