crypto

Documentation

Overview

Package crypto implements cryptographical primitives for MTproto.

Reference:

• https://core.telegram.org/mtproto/auth_key

Index

• func CheckDHParams(dhPrime, g, gA, gB *big.Int) error
• func DataWithHash(data []byte, randomSource io.Reader) ([]byte, error)
• func DecomposePQ(pq *big.Int, randSource io.Reader) (p, q *big.Int, err error)
• func EncryptHashed(data []byte, key *rsa.PublicKey, randomSource io.Reader) ([]byte, error)
• func GuessDataWithHash(dataWithHash []byte) []byte
• func Keys(authKey AuthKey, msgKey bin.Int128, mode Side) (key, iv bin.Int256)
• func MessageKey(authKey AuthKey, plaintextPadded []byte, mode Side) bin.Int128
• func NewSessionID(reader io.Reader) (int64, error)
• func ParseRSAPublicKeys(data []byte) ([]*rsa.PublicKey, error)
• func RSAFingerprint(key *rsa.PublicKey) int64
• func RandInt128(randSource io.Reader) (bin.Int128, error)
• func RandInt256(randSource io.Reader) (bin.Int256, error)
• func RandInt64(randSource io.Reader) (int64, error)
• func TempAESKeys(newNonce, serverNonce *big.Int) (key, iv []byte)
• type AuthKey
  • func (k AuthKey) AuxHash() [8]byte
  • func (k AuthKey) ID() [8]byte
  • func (k AuthKey) Zero() bool
• type EncryptedMessage
  • func (e *EncryptedMessage) Decode(b *bin.Buffer) error
  • func (e EncryptedMessage) Encode(b *bin.Buffer) error
• type EncryptedMessageData
  • func (e *EncryptedMessageData) Decode(b *bin.Buffer) error
  • func (e EncryptedMessageData) Encode(b *bin.Buffer) error
• type Side

Functions

func CheckDHParams

func CheckDHParams(dhPrime, g, gA, gB *big.Int) error

CheckDHParams checks that g_a, g_b and g params meet key exchange conditions.

https://core.telegram.org/mtproto/auth_key#dh-key-exchange-complete

func DataWithHash

func DataWithHash(data []byte, randomSource io.Reader) ([]byte, error)

DataWithHash prepends data with SHA1(data) and 0..15 random bytes so result length is divisible by 16.

Use GuessDataWithHash(result) to obtain data.

func DecomposePQ

func DecomposePQ(pq *big.Int, randSource io.Reader) (p, q *big.Int, err error)

DecomposePQ decomposes pq into prime factors such that p < q.

func EncryptHashed

func EncryptHashed(data []byte, key *rsa.PublicKey, randomSource io.Reader) ([]byte, error)

EncryptHashed encrypts given data with RSA, prefixing with a hash.

func GuessDataWithHash

func GuessDataWithHash(dataWithHash []byte) []byte

GuessDataWithHash guesses data from data_with_hash.

func Keys

func Keys(authKey AuthKey, msgKey bin.Int128, mode Side) (key, iv bin.Int256)

Keys returns (aes_key, aes_iv) pair for AES-IGE.

Reference: * https://core.telegram.org/mtproto/description#defining-aes-key-and-initialization-vector

Example:

key, iv := crypto.Keys(authKey, messageKey, crypto.Client)
cipher, err := aes.NewCipher(key[:])
if err != nil {
	return nil, err
}
encryptor := ige.NewIGEEncrypter(cipher, iv[:])

func MessageKey

func MessageKey(authKey AuthKey, plaintextPadded []byte, mode Side) bin.Int128

MessageKey computes message key for provided auth_key and padded payload.

func NewSessionID

func NewSessionID(reader io.Reader) (int64, error)

NewSessionID generates new random int64 from reader.

Use crypto/rand.Reader if session id should be cryptographically safe.

func ParseRSAPublicKeys

func ParseRSAPublicKeys(data []byte) ([]*rsa.PublicKey, error)

ParseRSAPublicKeys parses data as list of PEM-encdoed public keys.

func RSAFingerprint

func RSAFingerprint(key *rsa.PublicKey) int64

RSAFingerprint returns fingerprint of RSA public key as defined in MTProto.

func RandInt128

func RandInt128(randSource io.Reader) (bin.Int128, error)

RandInt128 generates and returns new random 128-bit integer.

Use crypto/rand.Reader as randSource in production.

func RandInt256

func RandInt256(randSource io.Reader) (bin.Int256, error)

RandInt256 generates and returns new random 256-bit integer.

Use crypto/rand.Reader as randSource in production.

func RandInt64

func RandInt64(randSource io.Reader) (int64, error)

RandInt64 returns random int64 from randSource.

func TempAESKeys

func TempAESKeys(newNonce, serverNonce *big.Int) (key, iv []byte)

TempAESKeys returns tmp_aes_key and tmp_aes_iv based on new_nonce and server_nonce as defined in "Creating an Authorization Key".

Types

type AuthKey

type AuthKey [256]byte

AuthKey represents 2048-bit authorization key.

func (AuthKey) AuxHash

func (k AuthKey) AuxHash() [8]byte

AuxHash returns aux_hash value of key.

func (AuthKey) ID

func (k AuthKey) ID() [8]byte

ID returns auth_key_id.

func (AuthKey) Zero

func (k AuthKey) Zero() bool

Zero reports whether AuthKey is zero value.

type EncryptedMessage

type EncryptedMessage struct {
	AuthKeyID [8]byte
	MsgKey    bin.Int128

	EncryptedData []byte
}

EncryptedMessage of protocol.

func (*EncryptedMessage) Decode

func (e *EncryptedMessage) Decode(b *bin.Buffer) error

Decode implements bin.Decoder.

func (EncryptedMessage) Encode

func (e EncryptedMessage) Encode(b *bin.Buffer) error

Encode implements bin.Encoder.

type EncryptedMessageData

type EncryptedMessageData struct {
	Salt                   int64
	SessionID              int64
	MessageID              int64
	SeqNo                  int32
	MessageDataLen         int32
	MessageDataWithPadding []byte
}

EncryptedMessageData is stored in EncryptedMessage.EncryptedData.

func (*EncryptedMessageData) Decode

func (e *EncryptedMessageData) Decode(b *bin.Buffer) error

Decode implements bin.Decoder.

func (EncryptedMessageData) Encode

func (e EncryptedMessageData) Encode(b *bin.Buffer) error

Encode implements bin.Encoder.

type Side

type Side byte

Side on which encryption is performed.

const (
	// Client side of encryption (e.g. messages from client).
	Client Side = 0
	// Server side of encryption (e.g. RPC responses).
	Server Side = 1
)