gnunet_pils_service.h File Reference

#include "gnunet_common.h"
#include "gnunet_util_lib.h"
#include "gnunet_hello_uri_lib.h"

Include dependency graph for gnunet_pils_service.h:

Go to the source code of this file.

Typedefs
typedef void(*	GNUNET_PILS_SignResultCallback) (void *cls, const struct GNUNET_PeerIdentity *pid, const struct GNUNET_CRYPTO_EddsaSignature *sig)
	A handler/callback to be called for signatures.
typedef void(*	GNUNET_PILS_SignAddrResultCallback) (void *cls, void *result, size_t result_size)
	A handler/callback to be called for signatures on addresses.
typedef void(*	GNUNET_PILS_DecapsResultCallback) (void *cls, const struct GNUNET_ShortHashCode *key)
	A handler/callback to be called for decaps.
typedef void(*	GNUNET_PILS_EcdhResultCallback) (void *cls, const struct GNUNET_HashCode *key)
	A handler/callback to be called for ecdh.
typedef void(*	GNUNET_PILS_PidChangeCallback) (void *cls, const struct GNUNET_HELLO_Parser *parser, const struct GNUNET_HashCode *hash)
	A handler/callback to be called on the change of the peer id.

Functions
struct GNUNET_PILS_Handle *	GNUNET_PILS_connect (const struct GNUNET_CONFIGURATION_Handle *cfg, GNUNET_PILS_PidChangeCallback pid_change_cb, void *cls)
	Connect to the PILS service.
void	GNUNET_PILS_disconnect (struct GNUNET_PILS_Handle *handle)
	Disconnect from the PILS service.
struct GNUNET_PILS_Operation *	GNUNET_PILS_sign_by_peer_identity (struct GNUNET_PILS_Handle *handle, const struct GNUNET_CRYPTO_SignaturePurpose *purpose, GNUNET_PILS_SignResultCallback cb, void *cb_cls)
	Sign data with the peer id.
struct GNUNET_PILS_Operation *	GNUNET_PILS_kem_decaps (struct GNUNET_PILS_Handle *handle, const struct GNUNET_CRYPTO_HpkeEncapsulation *c, GNUNET_PILS_DecapsResultCallback cb, void *cb_cls)
	Decaps an encapsulated key with our private key.
struct GNUNET_PILS_Operation *	GNUNET_PILS_ecdh (struct GNUNET_PILS_Handle *handle, const struct GNUNET_CRYPTO_EcdhePublicKey *pub, GNUNET_PILS_EcdhResultCallback cb, void *cb_cls)
	Derive key material from a ECDH public key and our private key.
void	GNUNET_PILS_feed_addresses (struct GNUNET_PILS_Handle *handle, const struct GNUNET_HELLO_Builder *addresses_builder)
	Feed a set of addresses to pils so that it will generate a new peer id based on the given set of addresses.
void	GNUNET_HELLO_builder_hash_addresses (const struct GNUNET_HELLO_Builder *builder, struct GNUNET_HashCode *address_hash)
	Hash address in builder.
void	GNUNET_PILS_derive_pid (size_t seed_key_bytes, const uint8_t seed_key[seed_key_bytes], const struct GNUNET_HashCode *addrs_hash, struct GNUNET_CRYPTO_EddsaPrivateKey *outkey)
	Generate the peer id from the addresses hash and the initial secret key.
struct GNUNET_PILS_Operation *	GNUNET_PILS_sign_hello (struct GNUNET_PILS_Handle *handle, const struct GNUNET_HELLO_Builder *builder, struct GNUNET_TIME_Absolute et, GNUNET_PILS_SignResultCallback cb, void *cb_cls)
	Create HELLO signature.
void	GNUNET_PILS_cancel (struct GNUNET_PILS_Operation *op)
	Cancel request.
const struct GNUNET_PeerIdentity *	GNUNET_PILS_get_identity (const struct GNUNET_PILS_Handle *handle)
	Return the current peer identity of a given handle.
const struct GNUNET_HashCode *	GNUNET_PILS_get_identity_hash (const struct GNUNET_PILS_Handle *handle)
	Return the hash of the current peer identity from a given handle.
enum GNUNET_GenericReturnValue	GNUNET_PILS_enable_private_key (struct GNUNET_PILS_Handle *handle)
	Enable local access to the private key of the current peer identity.
const struct GNUNET_CRYPTO_EddsaPrivateKey *	GNUNET_PILS_get_private_key (const struct GNUNET_PILS_Handle *handle)
	Return the private key of the current peer identity.
struct GNUNET_PILS_KeyRing *	GNUNET_PILS_create_key_ring (const struct GNUNET_CONFIGURATION_Handle *cfg, GNUNET_SCHEDULER_TaskCallback init_cb, void *cls)
	Create a key ring handle to use the current peer identity key.
void	GNUNET_PILS_destroy_key_ring (struct GNUNET_PILS_KeyRing *key_ring)
	Destroy a key ring handle and free its memory.
const struct GNUNET_CRYPTO_EddsaPrivateKey *	GNUNET_PILS_key_ring_get_private_key (const struct GNUNET_PILS_KeyRing *key_ring)
	Return the current private key of a given key ring handle.

Detailed Description

Author

ch3

Peer Identity Lifecycle Service; the API for managing Peer Identities

This api gives access to the PILS service.

The service maintains the peer identity. On address change it generates a new identity and informs subscribed components. It also signs data with the identity on request.

Note: Currently the signatures are actually made in the api. TODO is it fine this way?

Definition in file gnunet_pils_service.h.

Typedef Documentation

GNUNET_PILS_SignResultCallback

typedef void(* GNUNET_PILS_SignResultCallback) (void *cls, const struct GNUNET_PeerIdentity *pid, const struct GNUNET_CRYPTO_EddsaSignature *sig)

A handler/callback to be called for signatures.

The peer identity may have been changed by PILS in the meantime, so the identity that was used to sign is returned here.

Parameters

cls	The closure given to #GNUNET_PILS_sign
pid	the peer identity that produced the signature
sig	the signature, NULL on error

Definition at line 63 of file gnunet_pils_service.h.

GNUNET_PILS_SignAddrResultCallback

typedef void(* GNUNET_PILS_SignAddrResultCallback) (void *cls, void *result, size_t result_size)

A handler/callback to be called for signatures on addresses.

Parameters

cls	The closure given to #GNUNET_PILS_sign
result	allocated address record
result_size	size of result

Definition at line 75 of file gnunet_pils_service.h.

GNUNET_PILS_DecapsResultCallback

typedef void(* GNUNET_PILS_DecapsResultCallback) (void *cls, const struct GNUNET_ShortHashCode *key)

A handler/callback to be called for decaps.

Parameters

cls	The closure given to GNUNET_PILS_kem_decaps
key	The decapsulated key

Definition at line 86 of file gnunet_pils_service.h.

GNUNET_PILS_EcdhResultCallback

typedef void(* GNUNET_PILS_EcdhResultCallback) (void *cls, const struct GNUNET_HashCode *key)

A handler/callback to be called for ecdh.

Parameters

cls	The closure given to GNUNET_PILS_ecdh
key	The derived key material

Definition at line 96 of file gnunet_pils_service.h.

GNUNET_PILS_PidChangeCallback

typedef void(* GNUNET_PILS_PidChangeCallback) (void *cls, const struct GNUNET_HELLO_Parser *parser, const struct GNUNET_HashCode *hash)

A handler/callback to be called on the change of the peer id.

Parameters

cls	The closure given to GNUNET_PILS_connect
parser	a parsed HELLO block that represents the new PID
hash	The hash of addresses the peer id is based on. This hash is also returned by #GNUNET_PILS_feed_address.

Definition at line 108 of file gnunet_pils_service.h.

Function Documentation

GNUNET_PILS_connect()

struct GNUNET_PILS_Handle * GNUNET_PILS_connect	(	const struct GNUNET_CONFIGURATION_Handle *	cfg,
		GNUNET_PILS_PidChangeCallback	pid_change_cb,
		void *	cls
	)

Connect to the PILS service.

Parameters

cfg	configuration to use
pid_change_cb	handler/callback called once the peer id changes
cls	closure for pid_change_cb

Returns

Handle to the PILS service

Definition at line 624 of file pils_api.c.

{
  struct GNUNET_PILS_Handle *h;
 
  h = GNUNET_new (struct GNUNET_PILS_Handle);
  h->cfg = cfg;
  h->pid_change_cb = pid_change_cb;
  h->pid_change_cb_cls = cls;
  h->reconnect_delay = GNUNET_TIME_UNIT_ZERO;
  reconnect (h);
  return h;
}

References cfg, GNUNET_ARM_Handle::cfg, GNUNET_new, GNUNET_TIME_UNIT_ZERO, h, pid_change_cb(), and reconnect().

Referenced by advertise_dns_exit(), create_service(), DHTU_gnunet_init(), GCH_init(), GNUNET_PILS_create_key_ring(), GNUNET_TRANSPORT_TESTING_transport_communicator_service_start(), GSC_KX_init(), main_init(), run(), run(), run(), run(), run(), run(), run(), run(), run(), run(), run(), run(), run(), run(), and run().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_disconnect()

void GNUNET_PILS_disconnect

(

struct GNUNET_PILS_Handle *

handle

)

Disconnect from the PILS service.

Parameters

handle

handle to the PILS service (was returned by GNUNET_PILS_connect)

Definition at line 647 of file pils_api.c.

{
  struct GNUNET_PILS_Operation *op;
 
  GNUNET_assert (NULL != handle);
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "Disonnecting from peer identity lifecycle service.\n");
  if (NULL != handle->reconnect_task)
  {
    GNUNET_SCHEDULER_cancel (handle->reconnect_task);
    handle->reconnect_task = NULL;
  }
  if (NULL != handle->mq)
  {
    GNUNET_MQ_destroy (handle->mq);
    handle->mq = NULL;
  }
  LOG (GNUNET_ERROR_TYPE_DEBUG, "Cleaning up\n");
  while (NULL != (op = handle->op_head))
    op_destroy (op);
  if (handle->peer_id)
    GNUNET_free (handle->peer_id);
  if (NULL != handle->private_key)
  {
    GNUNET_CRYPTO_zero_keys (handle->private_key,
                             sizeof (*handle->private_key));
    GNUNET_free (handle->private_key);
  }
  GNUNET_CRYPTO_zero_keys (handle->initial_key_material,
                           sizeof (handle->initial_key_material));
  GNUNET_free (handle);
}

References GNUNET_assert, GNUNET_CRYPTO_zero_keys(), GNUNET_ERROR_TYPE_DEBUG, GNUNET_free, GNUNET_MQ_destroy(), GNUNET_SCHEDULER_cancel(), handle, LOG, GNUNET_VPN_Handle::mq, op, and op_destroy().

Referenced by cleaning_task(), cleanup(), cleanup_task(), destroy_service(), DHTU_gnunet_done(), do_shutdown(), do_shutdown(), do_shutdown(), do_shutdown(), do_shutdown(), do_shutdown(), do_shutdown(), GCH_shutdown(), GNUNET_PILS_destroy_key_ring(), GNUNET_TRANSPORT_TESTING_transport_communicator_service_stop(), GSC_KX_done(), run(), shutdown_task(), shutdown_task(), shutdown_task(), shutdown_task(), shutdown_task(), shutdown_task(), and shutdown_task().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_sign_by_peer_identity()

struct GNUNET_PILS_Operation * GNUNET_PILS_sign_by_peer_identity	(	struct GNUNET_PILS_Handle *	handle,
		const struct GNUNET_CRYPTO_SignaturePurpose *	purpose,
		GNUNET_PILS_SignResultCallback	cb,
		void *	cb_cls
	)

Sign data with the peer id.

TODO not sure whether this was the intended design from last meeting - this is currently following the design of GNUNET_CRYPTO_blinded_key_sign_by_peer_identity

In particular we currently transfer the secret key from the service to the api so we can sign in-place and have no ipc-overhead. Is this fine?

Parameters

handle	handle to the PILS service
purpose	what to sign (size, purpose and data) TODO improve wording - look at GNUNET_CRYPTO_eddsa_sign
cb	signature result callback
cb_cls	closure for the cb

Returns

handle to the operation, NULL on error

Parameters

handle	handle to the PILS service
purpose	what to sign (size, purpose and data)
cb	callback to call once the signature is ready
cb_cls	closure to cb

Returns

handle to the operation, NULL on error

Definition at line 692 of file pils_api.c.

{
  struct GNUNET_PILS_Operation *op;
  struct SignRequestMessage *msg;
  size_t plen = ntohl (purpose->size);
 
  GNUNET_assert (sizeof (*msg) + plen <= UINT16_MAX);
  msg = GNUNET_malloc (sizeof (*msg) + plen);
  msg->header.type = htons (GNUNET_MESSAGE_TYPE_PILS_SIGN_REQUEST);
  msg->header.size = htons (sizeof (*msg) + plen);
  msg->rid = htonl (handle->op_id_counter++);
  memcpy (&msg[1], purpose, plen);
  op = op_start (handle, &msg->header);
  op->sign_cb = cb;
  op->cb_cls = cb_cls;
  op->op_id = ntohl (msg->rid);
  transmit_op (op);
  return op;
}

References GNUNET_assert, GNUNET_malloc, GNUNET_MESSAGE_TYPE_PILS_SIGN_REQUEST, handle, msg, op, op_start(), GNUNET_MessageHeader::size, GNUNET_CRYPTO_SignaturePurpose::size, transmit_op(), and GNUNET_MessageHeader::type.

Referenced by do_dht_put(), GDS_helper_sign_path(), GNUNET_PILS_sign_hello(), regex_iterator(), send_create(), sign_message_by_peer(), and transmit_task_cb().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_kem_decaps()

struct GNUNET_PILS_Operation * GNUNET_PILS_kem_decaps	(	struct GNUNET_PILS_Handle *	handle,
		const struct GNUNET_CRYPTO_HpkeEncapsulation *	c,
		GNUNET_PILS_DecapsResultCallback	cb,
		void *	cb_cls
	)

Decaps an encapsulated key with our private key.

TODO whether it's fine to use the private key in this way needs to be discussed. If not, another key (which has been signed with this id) needs to be used for en-/decapsulating.

Parameters

handle	handle to the PILS service
c	the encapsulated key
cb	the callback to call with the decapsulated key
cb_cls	callback closure

Returns

handle to the operation, NULL on error

Parameters

handle	handle to the PILS service
c	the encapsulated key
prk	where to write the key material HKDF-Extract(c||aX)=HKDF-Extract(c||x(aG))

Returns

handle to the operation, NULL on error

Definition at line 728 of file pils_api.c.

{
  struct GNUNET_PILS_Operation *op;
  struct DecapsMessage *msg;
 
  msg = GNUNET_new (struct DecapsMessage);
  msg->header.type = htons (GNUNET_MESSAGE_TYPE_PILS_KEM_DECAPS);
  msg->header.size = htons (sizeof (*msg));
  msg->c = *c;
  msg->rid = htonl (handle->op_id_counter++);
  op = op_start (handle, &msg->header);
  op->decaps_cb = cb;
  op->cb_cls = cb_cls;
  op->op_id = ntohl (msg->rid);
  transmit_op (op);
  return op;
}

References DecapsMessage::c, GNUNET_MESSAGE_TYPE_PILS_KEM_DECAPS, GNUNET_new, handle, msg, op, op_start(), GNUNET_MessageHeader::size, transmit_op(), and GNUNET_MessageHeader::type.

Here is the call graph for this function:

GNUNET_PILS_ecdh()

struct GNUNET_PILS_Operation * GNUNET_PILS_ecdh	(	struct GNUNET_PILS_Handle *	handle,
		const struct GNUNET_CRYPTO_EcdhePublicKey *	pub,
		GNUNET_PILS_EcdhResultCallback	cb,
		void *	cb_cls
	)

Derive key material from a ECDH public key and our private key.

Parameters

handle	handle to the PILS service
pub	the public key
cb	the callback to call with the derived key material
cb_cls	callback closure

Returns

handle to the operation, NULL on error

Definition at line 751 of file pils_api.c.

{
  struct GNUNET_PILS_Operation *op;
  struct EcdhMessage *msg;
 
  GNUNET_assert ((handle) && (pub));
 
  msg = GNUNET_new (struct EcdhMessage);
  msg->header.type = htons (GNUNET_MESSAGE_TYPE_PILS_ECDH);
  msg->header.size = htons (sizeof (*msg));
  msg->pub = *pub;
  msg->rid = htonl (handle->op_id_counter++);
  op = op_start (handle, &msg->header);
  op->ecdh_cb = cb;
  op->cb_cls = cb_cls;
  op->op_id = ntohl (msg->rid);
  transmit_op (op);
  return op;
}

References GNUNET_assert, GNUNET_MESSAGE_TYPE_PILS_ECDH, GNUNET_new, handle, msg, op, op_start(), pub, GNUNET_MessageHeader::size, transmit_op(), and GNUNET_MessageHeader::type.

Referenced by GCT_handle_kx(), and GCT_handle_kx_auth().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_feed_addresses()

void GNUNET_PILS_feed_addresses	(	struct GNUNET_PILS_Handle *	handle,
		const struct GNUNET_HELLO_Builder *	addresses_builder
	)

Feed a set of addresses to pils so that it will generate a new peer id based on the given set of addresses.

THIS IS ONLY TO BE CALLED FROM CORE!

The address representation will be canonicalized/sorted by pils before the new peer id is generated.

Parameters

handle	the handle to the PILS service
addresses_builder	addresses to feed as builder

Definition at line 817 of file pils_api.c.

{
  struct FeedAddressesMessage *msg;
  struct GNUNET_MQ_Envelope *env;
  size_t block_bytes;
 
  block_bytes = GNUNET_HELLO_get_builder_to_block_size (builder);
  // TODO check whether the new hash and the 'current' hash are the same -
  //      nothing to do in that case (directly return the peer id?)
  env = GNUNET_MQ_msg_extra (msg,
                             block_bytes,
                             GNUNET_MESSAGE_TYPE_PILS_FEED_ADDRESSES);
  msg->block_len = htonl (block_bytes);
  GNUNET_HELLO_builder_to_block (
    builder,
    NULL,
    NULL,
    GNUNET_TIME_relative_to_absolute (GNUNET_TIME_UNIT_ZERO),
    (char*) &msg[1]);
  GNUNET_MQ_send (handle->mq, env);
}

References builder, env, GNUNET_HELLO_builder_to_block(), GNUNET_HELLO_get_builder_to_block_size(), GNUNET_MESSAGE_TYPE_PILS_FEED_ADDRESSES, GNUNET_MQ_msg_extra, GNUNET_MQ_send(), GNUNET_TIME_relative_to_absolute(), GNUNET_TIME_UNIT_ZERO, handle, GNUNET_VPN_Handle::mq, and msg.

Referenced by feed_addresses_to_pils().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_derive_pid()

void GNUNET_PILS_derive_pid	(	size_t	seed_key_bytes,
		const uint8_t	seed_key[seed_key_bytes],
		const struct GNUNET_HashCode *	addrs_hash,
		struct GNUNET_CRYPTO_EddsaPrivateKey *	outkey
	)

Generate the peer id from the addresses hash and the initial secret key.

Parameters

	seed_key_bytes	length of the seed key in bytes
	seed_key	the initial secret key
	addrs_hash	the address to use for derivation
[out]	outkey	the (private) peer identity key

Since we should have initial keying material of good quality here, this is effectively a PRF called on the address hash with a uniform random key.

We now expand the PRK to the key size we actually require. FIXME: IF we want to use elligator, we need to find a private key that can actually be used as such. For that, we may want to add a counter to the initial secret key to the above PRF.

Definition at line 783 of file pils_api.c.

{
  struct GNUNET_ShortHashCode prk;
 
  GNUNET_assert (GNUNET_OK ==
                 GNUNET_CRYPTO_hkdf_extract (&prk,
                                             addrs_hash,
                                             sizeof *addrs_hash,
                                             seed_key,
                                             seed_key_bytes));
  GNUNET_CRYPTO_hkdf_expand (
    outkey,
    sizeof *outkey,
    &prk,
    GNUNET_CRYPTO_kdf_arg_string ("gnunet-pils-ephemeral-peer-key"));
}

References GNUNET_assert, GNUNET_CRYPTO_hkdf_expand, GNUNET_CRYPTO_hkdf_extract(), GNUNET_CRYPTO_kdf_arg_string, GNUNET_OK, and seed_key.

Referenced by derive_private_key(), do_generate_pid(), pid_change_cb(), and run().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_sign_hello()

struct GNUNET_PILS_Operation * GNUNET_PILS_sign_hello	(	struct GNUNET_PILS_Handle *	handle,
		const struct GNUNET_HELLO_Builder *	builder,
		struct GNUNET_TIME_Absolute	et,
		GNUNET_PILS_SignResultCallback	cb,
		void *	cb_cls
	)

Create HELLO signature.

Parameters

handle	handle to the pils service
builder	the builder to use
et	expiration time to sign
cb	callback to call with the signature
cb_cls	closure to cb

Definition at line 851 of file pils_api.c.

{
  struct PilsHelloSignaturePurpose hsp = {
    .purpose.size = htonl (sizeof (hsp)),
    .purpose.purpose = htonl (GNUNET_SIGNATURE_PURPOSE_HELLO),
    .expiration_time = GNUNET_TIME_absolute_hton (et)
  };
  GNUNET_HELLO_builder_hash_addresses (builder,
                                       &hsp.h_addrs);
  GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
              "Address hash is %s\n",
              GNUNET_h2s_full (&hsp.h_addrs));
  return GNUNET_PILS_sign_by_peer_identity (handle,
                                            &hsp.purpose,
                                            cb,
                                            cb_cls);
}

References builder, GNUNET_ERROR_TYPE_DEBUG, GNUNET_h2s_full(), GNUNET_HELLO_builder_hash_addresses(), GNUNET_log, GNUNET_PILS_sign_by_peer_identity(), GNUNET_SIGNATURE_PURPOSE_HELLO, GNUNET_TIME_absolute_hton(), PilsHelloSignaturePurpose::h_addrs, handle, PilsHelloSignaturePurpose::purpose, and GNUNET_CRYPTO_SignaturePurpose::size.

Referenced by peerstore_store_own_cb(), and pid_changed_cb().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_cancel()

void GNUNET_PILS_cancel

(

struct GNUNET_PILS_Operation *

op

)

Cancel request.

Parameters

op	cancel PILS operation

Definition at line 776 of file pils_api.c.

{
  op_destroy (op);
}

References op, and op_destroy().

Referenced by cancel_address_store(), cleanup(), cleanup_helper_operation(), destroy_tunnel(), do_dht_put(), do_initial_dht_put(), do_shutdown(), GCC_destroy(), GCH_shutdown(), GCT_handle_kx(), GCT_handle_kx_auth(), iterate_cancel_signature(), regex_iterator(), send_create(), shutdown_task(), and shutdown_task().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_get_identity()

const struct GNUNET_PeerIdentity * GNUNET_PILS_get_identity

(

const struct GNUNET_PILS_Handle *

handle

)

Return the current peer identity of a given handle.

Parameters

handle

handle to the pils service

Returns

Peer identity or NULL on failure

Definition at line 875 of file pils_api.c.

{
  GNUNET_assert (handle);
 
  return handle->peer_id;
}

References GNUNET_assert, and handle.

Referenced by announce_id(), cb_path_signed(), check_dv_box(), check_dv_learn(), decaps_dv_box_cont(), decrypt_and_check_tc(), dir_ready_cb(), do_initial_dht_put(), do_rekey(), encapsulate_for_dv(), find_proof(), forward_dv_learn(), forward_reply(), GCCH_bind(), GCCH_channel_local_new(), GCPP_try_path_from_dht(), GCT_alice_or_betty(), GDS_CLIENTS_handle_reply(), GDS_NEIGHBOURS_get_id(), GDS_NEIGHBOURS_handle_get(), GDS_NEIGHBOURS_handle_put(), GDS_NEIGHBOURS_handle_reply(), GDS_try_connect(), GDS_u_connect(), get_next_free_ctn(), got_hello(), GSC_CLIENTS_solicit_request(), GSC_complete_initialization_cb(), GSC_KX_start(), GSC_SESSIONS_dequeue_request(), GSF_peer_connect_handler(), handle_backchannel_encapsulation(), handle_client_init(), handle_client_send_request(), handle_communicator_available(), handle_connection_create(), handle_core_connect(), handle_core_disconnect(), handle_dht_local_get(), handle_dht_local_hello_get(), handle_dht_local_put(), handle_dht_p2p_get(), handle_dht_p2p_put(), handle_dht_p2p_result(), handle_dv_box(), handle_dv_learn(), handle_find_my_hello(), handle_hello_for_client(), handle_hello_for_incoming(), handle_p2p_estimate(), handle_port_open(), handle_suggest(), handle_transport_notify_connect(), handshake_monotime_cb(), iface_proc(), inject_rekey(), learn_dv_path(), mq_send(), peerinfo_cb(), pid_change_cb(), pid_change_cb(), pils_id_change_cb(), pils_pid_change_cb(), pils_sign_address(), recv_rx_key_cb(), regex_iterator(), route_message(), run(), send_broken_without_mqm(), send_challenge(), send_create(), send_initiator_hello(), send_msg_with_kx(), setup_flood_message(), setup_in_cipher(), setup_in_cipher_elligator(), sock_read(), sock_read(), start_dv_learn(), store_pi(), tokenized_cb(), transmit_kx(), try_connection_reversal(), try_handle_plaintext(), update_flood_message(), and verify_confirmation().

GNUNET_PILS_get_identity_hash()

const struct GNUNET_HashCode * GNUNET_PILS_get_identity_hash

(

const struct GNUNET_PILS_Handle *

handle

)

Return the hash of the current peer identity from a given handle.

Parameters

handle

handle to the pils service

Returns

Peer identity hash or NULL on failure

Definition at line 884 of file pils_api.c.

{
  GNUNET_assert (handle);
 
  if (NULL == handle->peer_id)
    return NULL;
 
  return &handle->peer_hash;
}

References GNUNET_assert, and handle.

Referenced by find_bucket(), GDS_am_closest_peer(), GDS_DATACACHE_handle_put(), GDS_NEIGHBOURS_handle_get(), GDS_NEIGHBOURS_handle_put(), handle_find_my_hello(), handle_initiator_hello(), handle_initiator_hello_cont(), restart_kx(), select_peer(), and send_find_peer_message().

Here is the caller graph for this function:

GNUNET_PILS_enable_private_key()

enum GNUNET_GenericReturnValue GNUNET_PILS_enable_private_key

(

struct GNUNET_PILS_Handle *

handle

)

Enable local access to the private key of the current peer identity.

Loads the peer's master key from [PEER]/PRIVATE_KEY (the same file the PILS service itself uses) and derives the private key belonging to the current peer identity from it, re-deriving it whenever the peer identity changes. This lets a caller sign directly with GNUNET_CRYPTO_eddsa_sign() instead of round-tripping through the service with GNUNET_PILS_sign_by_peer_identity(), which is what you want when the signature is needed in the middle of a synchronous operation.

Only call this from components that may hold the peer's private key.

Parameters

handle

handle to the pils service

Returns

GNUNET_OK on success, GNUNET_SYSERR if the key could not be loaded (the handle stays usable, just without local key access)

Definition at line 896 of file pils_api.c.

{
  char *keyfile;
  struct GNUNET_CRYPTO_EddsaPrivateKey key;
 
  GNUNET_assert (handle);
  if (handle->have_ikm)
    return GNUNET_OK; /* already enabled */
  if (GNUNET_OK !=
      GNUNET_CONFIGURATION_get_value_filename (handle->cfg,
                                               "PEER",
                                               "PRIVATE_KEY",
                                               &keyfile))
  {
    GNUNET_log_config_missing (GNUNET_ERROR_TYPE_ERROR,
                               "PEER",
                               "PRIVATE_KEY");
    return GNUNET_SYSERR;
  }
  if (GNUNET_SYSERR ==
      GNUNET_CRYPTO_eddsa_key_from_file (keyfile,
                                         GNUNET_YES,
                                         &key))
  {
    LOG (GNUNET_ERROR_TYPE_ERROR,
         "Failed to load the peer's private key from `%s'\n",
         keyfile);
    GNUNET_free (keyfile);
    return GNUNET_SYSERR;
  }
  GNUNET_free (keyfile);
  GNUNET_assert (sizeof (handle->initial_key_material) == sizeof (key.d));
  memcpy (handle->initial_key_material,
          key.d,
          sizeof (handle->initial_key_material));
  GNUNET_CRYPTO_zero_keys (&key,
                           sizeof (key));
  handle->have_ikm = true;
  /* If the service already told us our identity, catch up now so that
     callers do not have to wait for the next PID change. */
  if (NULL != handle->peer_id)
    derive_private_key (handle);
  return GNUNET_OK;
}

References GNUNET_VPN_Handle::cfg, derive_private_key(), GNUNET_assert, GNUNET_CONFIGURATION_get_value_filename(), GNUNET_CRYPTO_eddsa_key_from_file(), GNUNET_CRYPTO_zero_keys(), GNUNET_ERROR_TYPE_ERROR, GNUNET_free, GNUNET_log_config_missing(), GNUNET_OK, GNUNET_SYSERR, GNUNET_YES, handle, key, and LOG.

Referenced by GSC_KX_start(), run(), and run().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_get_private_key()

const struct GNUNET_CRYPTO_EddsaPrivateKey * GNUNET_PILS_get_private_key

(

const struct GNUNET_PILS_Handle *

handle

)

Return the private key of the current peer identity.

Requires a preceding successful call to GNUNET_PILS_enable_private_key(). The returned key belongs to the identity GNUNET_PILS_get_identity() reports and stays valid until the peer identity changes, so do not cache it across GNUNET_PILS_PidChangeCallback invocations.

Parameters

handle

handle to the pils service

Returns

the private key, or NULL if local key access was not enabled, no peer identity is known yet, or the loaded key does not match the identity announced by the service

Definition at line 943 of file pils_api.c.

{
  GNUNET_assert (handle);
 
  return handle->private_key;
}

References GNUNET_assert, and handle.

Referenced by GDS_NEIGHBOURS_handle_put(), GDS_NEIGHBOURS_handle_reply(), handle_dv_box(), handle_initiator_hello(), handle_responder_hello(), and sign_by_my_identity().

Here is the caller graph for this function:

GNUNET_PILS_create_key_ring()

struct GNUNET_PILS_KeyRing * GNUNET_PILS_create_key_ring	(	const struct GNUNET_CONFIGURATION_Handle *	cfg,
		GNUNET_SCHEDULER_TaskCallback	init_cb,
		void *	cls
	)

Create a key ring handle to use the current peer identity key.

Parameters

cfg	configuration to use
init_cb	initial callback or NULL
cls	closure of callback or NULL

Returns

Handle to the PILS key ring or NULL on failure

Create a key ring handle to use the current peer identity key.

This is supposed to be generated at random once in the lifetime of a peer, so all generated peer ids use the same initial secret key to obtain the same peer id per set of addresses.

First check whether there's already a initial secret key. If so: return it. If no initial secret key exists yet, generate at random and store it where it will be found.

Definition at line 1008 of file pils_api.c.

{
  char *keyfile;
  struct GNUNET_CRYPTO_EddsaPrivateKey key;
 
  GNUNET_assert (cfg);
 
  LOG (GNUNET_ERROR_TYPE_DEBUG, "Create key ring!\n");
 
  if (GNUNET_OK !=
      GNUNET_CONFIGURATION_get_value_filename (cfg,
                                               "PEER",
                                               "PRIVATE_KEY",
                                               &keyfile))
  {
    GNUNET_log_config_missing (GNUNET_ERROR_TYPE_ERROR,
                               "PEER",
                               "PRIVATE_KEY");
    return NULL;
  }
 
  if (GNUNET_SYSERR ==
      GNUNET_CRYPTO_eddsa_key_from_file (keyfile,
                                         GNUNET_YES,
                                         &key))
  {
    GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
                "Failed to setup peer's private key\n");
    GNUNET_free (keyfile);
    return NULL;
  }
 
  GNUNET_free (keyfile);
 
  struct GNUNET_PILS_KeyRing *key_ring =
    GNUNET_new (struct GNUNET_PILS_KeyRing);
  if (NULL == key_ring)
    return NULL;
  key_ring->init_cb = init_cb;
  key_ring->cls = cls;
 
  GNUNET_assert (sizeof (key_ring->initial_key_material) == sizeof key.d);
 
  key_ring->pils = GNUNET_PILS_connect (cfg, &pid_change_cb, key_ring);
  if (NULL == key_ring->pils)
  {
    GNUNET_free (key_ring);
    return NULL;
  }
 
  memcpy (key_ring->initial_key_material, key.d,
          sizeof (key_ring->initial_key_material));
 
  return key_ring;
}

References cfg, GNUNET_PILS_KeyRing::cls, GNUNET_assert, GNUNET_CONFIGURATION_get_value_filename(), GNUNET_CRYPTO_eddsa_key_from_file(), GNUNET_ERROR_TYPE_DEBUG, GNUNET_ERROR_TYPE_ERROR, GNUNET_free, GNUNET_log, GNUNET_log_config_missing(), GNUNET_new, GNUNET_OK, GNUNET_PILS_connect(), GNUNET_SYSERR, GNUNET_YES, init_cb(), GNUNET_PILS_KeyRing::init_cb, GNUNET_PILS_KeyRing::initial_key_material, key, key_ring, LOG, pid_change_cb(), and GNUNET_PILS_KeyRing::pils.

Referenced by run(), and run().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_destroy_key_ring()

void GNUNET_PILS_destroy_key_ring

(

struct GNUNET_PILS_KeyRing *

key_ring

)

Destroy a key ring handle and free its memory.

Parameters

key_ring

key ring handle

Definition at line 1068 of file pils_api.c.

{
  GNUNET_assert (key_ring);
 
  LOG (GNUNET_ERROR_TYPE_DEBUG, "Destroy key ring!\n");
 
  if (key_ring->pils)
    GNUNET_PILS_disconnect (key_ring->pils);
 
  if (key_ring->private_key)
  {
    GNUNET_CRYPTO_zero_keys (key_ring->private_key,
                             sizeof (*(key_ring->private_key)));
    GNUNET_free (key_ring->private_key);
  }
 
  GNUNET_CRYPTO_zero_keys (key_ring->initial_key_material,
                           sizeof (key_ring->initial_key_material));
  GNUNET_free (key_ring);
}

References GNUNET_assert, GNUNET_CRYPTO_zero_keys(), GNUNET_ERROR_TYPE_DEBUG, GNUNET_free, GNUNET_PILS_disconnect(), GNUNET_PILS_KeyRing::initial_key_material, key_ring, LOG, GNUNET_PILS_KeyRing::pils, and GNUNET_PILS_KeyRing::private_key.

Referenced by do_shutdown(), and do_shutdown().

Here is the call graph for this function:

Here is the caller graph for this function:

GNUNET_PILS_key_ring_get_private_key()

const struct GNUNET_CRYPTO_EddsaPrivateKey * GNUNET_PILS_key_ring_get_private_key

(

const struct GNUNET_PILS_KeyRing *

key_ring

)

Return the current private key of a given key ring handle.

Parameters

key_ring

key ring handle

Returns

Private key or NULL on failure

Definition at line 1091 of file pils_api.c.

{
  GNUNET_assert (key_ring);
 
  return key_ring->private_key;
}

References GNUNET_assert, key_ring, and GNUNET_PILS_KeyRing::private_key.

Referenced by iface_proc(), inject_rekey(), send_challenge(), send_msg_with_kx(), setup_in_cipher(), setup_in_cipher_elligator(), setup_initial_shared_secret_dec(), setup_shared_secret_dec(), and transmit_kx().

Here is the caller graph for this function: