Crypto.Noise.Internal.Handshake.Validation

Documentation

type ErrorPosition = (Int, Int)

(message number, token number)

Represents the location within the pattern at which an error resides, starting with zero.

data InspectionError

Represents a single error associated with a pattern.

• InitMultipleETokens, InitMultipleSTokens, RespMultipleETokens, RespMultipleSTokens -- multiple e/s tokens were encountered for a message originating with the initiator/responder.
• InitSecretNotRandom, RespSecretNotRandom -- From the protocol:

After performing a DH between a remote public key and any local private
key that is not an ephemeral private key, the local party must not send
any encrypted data (i.e. must not call ENCRYPT()) unless it has also
performed a DH between an ephemeral private key and the remote public
key.

• DHInPreMsg -- A DH token (such as ee or es) was found in the pre-message portion of the handshake.
• PSKInPreMsg -- A psk token was found in the pre-message portion of the handshake.
• PSKWithoutEToken -- A psk token was used before an e token was encountered.

Constructors

InitMultipleETokens ErrorPosition

InitMultipleSTokens ErrorPosition

RespMultipleETokens ErrorPosition

RespMultipleSTokens ErrorPosition

InitSecretNotRandom ErrorPosition

RespSecretNotRandom ErrorPosition

DHInPreMsg ErrorPosition

PSKInPreMsg ErrorPosition

PSKWithoutEToken ErrorPosition

Instances

Show InspectionError

Defined in Crypto.Noise.Internal.Handshake.Validation

Methods

showsPrec :: Int -> InspectionError -> ShowS

show :: InspectionError -> String

showList :: [InspectionError] -> ShowS

data Inspection

Constructors

Inspection

Fields

• _iInitESent :: Bool
• _iInitSSent :: Bool
• _iInitPSKSent :: Bool
• _iRespESent :: Bool
• _iRespSSent :: Bool
• _iRespPSKSent :: Bool
• _iInitRandReq :: Bool
• _iInitRandDone :: Bool
• _iRespRandReq :: Bool
• _iRespRandDone :: Bool
• _iCurTokenPos :: Int
• _iCurMsgPos :: Int
• _iErrors :: [InspectionError]

Instances

Show Inspection

Defined in Crypto.Noise.Internal.Handshake.Validation

Methods

showsPrec :: Int -> Inspection -> ShowS

show :: Inspection -> String

showList :: [Inspection] -> ShowS

iRespSSent :: Lens' Inspection Bool

iRespRandReq :: Lens' Inspection Bool

iRespRandDone :: Lens' Inspection Bool

iRespPSKSent :: Lens' Inspection Bool

iRespESent :: Lens' Inspection Bool

iInitSSent :: Lens' Inspection Bool

iInitRandReq :: Lens' Inspection Bool

iInitRandDone :: Lens' Inspection Bool

iInitPSKSent :: Lens' Inspection Bool

iInitESent :: Lens' Inspection Bool

iErrors :: Lens' Inspection [InspectionError]

iCurTokenPos :: Lens' Inspection Int

iCurMsgPos :: Lens' Inspection Int

inspection :: Inspection

verifyNotInPreMsg :: Message a -> State Inspection ()

verifyRandDoneIfReq :: Message a -> State Inspection ()

verifyESentIfPSK :: Message a -> State Inspection ()

continueToken :: a -> State Inspection a

continueMsg :: a -> State Inspection a

addError :: (ErrorPosition -> InspectionError) -> State Inspection ()

inspectToken :: Message m -> Token a -> State Inspection a

inspectMessage :: Message a -> State Inspection a

validateHandshakePattern :: HandshakePattern -> [InspectionError]

Validates a HandshakePattern according to the rules defined in section 7.1 and 9.3 of the protocol. If no violations are found, the result will be an empty list.