Lines Matching defs:chaining_key
83 memset(&handshake->chaining_key, 0, NOISE_HASH_LEN);
346 size_t data_len, const u8 chaining_key[NOISE_HASH_LEN])
360 hmac(secret, data, chaining_key, data_len, NOISE_HASH_LEN);
394 const u8 chaining_key[NOISE_HASH_LEN])
399 chaining_key);
404 static bool __must_check mix_dh(u8 chaining_key[NOISE_HASH_LEN],
413 kdf(chaining_key, key, NULL, dh_calculation, NOISE_HASH_LEN,
414 NOISE_SYMMETRIC_KEY_LEN, 0, NOISE_PUBLIC_KEY_LEN, chaining_key);
419 static bool __must_check mix_precomputed_dh(u8 chaining_key[NOISE_HASH_LEN],
426 kdf(chaining_key, key, NULL, precomputed, NOISE_HASH_LEN,
428 chaining_key);
442 static void mix_psk(u8 chaining_key[NOISE_HASH_LEN], u8 hash[NOISE_HASH_LEN],
448 kdf(chaining_key, temp_hash, key, psk, NOISE_HASH_LEN, NOISE_HASH_LEN,
449 NOISE_SYMMETRIC_KEY_LEN, NOISE_SYMMETRIC_KEY_LEN, chaining_key);
454 static void handshake_init(u8 chaining_key[NOISE_HASH_LEN],
459 memcpy(chaining_key, handshake_init_chaining_key, NOISE_HASH_LEN);
487 u8 chaining_key[NOISE_HASH_LEN],
493 kdf(chaining_key, NULL, NULL, ephemeral_src, NOISE_HASH_LEN, 0, 0,
494 NOISE_PUBLIC_KEY_LEN, chaining_key);
537 handshake_init(handshake->chaining_key, handshake->hash,
546 dst->unencrypted_ephemeral, handshake->chaining_key,
550 if (!mix_dh(handshake->chaining_key, key, handshake->ephemeral_private,
560 if (!mix_precomputed_dh(handshake->chaining_key, key,
591 u8 chaining_key[NOISE_HASH_LEN];
602 handshake_init(chaining_key, hash, wg->static_identity.static_public);
605 message_ephemeral(e, src->unencrypted_ephemeral, chaining_key, hash);
608 if (!mix_dh(chaining_key, key, wg->static_identity.static_private, e))
623 if (!mix_precomputed_dh(chaining_key, key,
648 memcpy(handshake->chaining_key, chaining_key, NOISE_HASH_LEN);
660 memzero_explicit(chaining_key, NOISE_HASH_LEN);
693 dst->unencrypted_ephemeral, handshake->chaining_key,
697 if (!mix_dh(handshake->chaining_key, NULL, handshake->ephemeral_private,
702 if (!mix_dh(handshake->chaining_key, NULL, handshake->ephemeral_private,
707 mix_psk(handshake->chaining_key, handshake->hash, key,
736 u8 chaining_key[NOISE_HASH_LEN];
756 memcpy(chaining_key, handshake->chaining_key, NOISE_HASH_LEN);
767 message_ephemeral(e, src->unencrypted_ephemeral, chaining_key, hash);
770 if (!mix_dh(chaining_key, NULL, ephemeral_private, e))
774 if (!mix_dh(chaining_key, NULL, wg->static_identity.static_private, e))
778 mix_psk(chaining_key, hash, key, preshared_key);
796 memcpy(handshake->chaining_key, chaining_key, NOISE_HASH_LEN);
808 memzero_explicit(chaining_key, NOISE_HASH_LEN);
836 handshake->chaining_key);
839 handshake->chaining_key);