crypto

Jan 17, 2019 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Jan 17, 2019 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Aug 28, 2018 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Aug 31, 2018 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Aug 16, 2018 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Changes in this version

type TLSExporter

+ ConnectionState func() mint.ConnectionState

Jun 27, 2018 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Feb 3, 2018 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Changes in this version

type CertManager

+ GetChain func() []*x509.Certificate

Dec 12, 2017 GO-2024-2459 +2 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

Changes in this version

+ func HashCert(cert []byte) uint64

+ type AEAD interface

+ Open func(dst, src []byte, packetNumber protocol.PacketNumber, associatedData []byte) ([]byte, error)

+ Overhead func() int

+ Seal func(dst, src []byte, packetNumber protocol.PacketNumber, associatedData []byte) []byte

+ func DeriveAESKeys(tls TLSExporter, pers protocol.Perspective) (AEAD, error)

+ func DeriveQuicCryptoAESKeys(forwardSecure bool, sharedSecret, nonces []byte, connID protocol.ConnectionID, ...) (AEAD, error)

+ func NewAEADAESGCM(otherKey []byte, myKey []byte, otherIV []byte, myIV []byte) (AEAD, error)

+ func NewAEADAESGCM12(otherKey []byte, myKey []byte, otherIV []byte, myIV []byte) (AEAD, error)

+ func NewNullAEAD(p protocol.Perspective, connID protocol.ConnectionID, v protocol.VersionNumber) (AEAD, error)

+ type CertChain interface

+ GetCertsCompressed func(sni string, commonSetHashes, cachedHashes []byte) ([]byte, error)

+ GetLeafCert func(sni string) ([]byte, error)

+ SignServerProof func(sni string, chlo []byte, serverConfigData []byte) ([]byte, error)

+ func NewCertChain(tlsConfig *tls.Config) CertChain

+ type CertManager interface

+ GetCommonCertificateHashes func() []byte

+ GetLeafCert func() []byte

+ GetLeafCertHash func() (uint64, error)

+ SetData func([]byte) error

+ Verify func(hostname string) error

+ VerifyServerProof func(proof, chlo, serverConfigData []byte) bool

+ func NewCertManager(tlsConfig *tls.Config) CertManager

+ type KeyExchange interface

+ CalculateSharedKey func(otherPublic []byte) ([]byte, error)

+ PublicKey func() []byte

+ func NewCurve25519KEX() (KeyExchange, error)

+ type TLSExporter interface

+ ComputeExporter func(label string, context []byte, keyLength int) ([]byte, error)

+ GetCipherSuite func() mint.CipherSuiteParams