dnscrypt.h

Go to the documentation of this file.

#ifndef UNBOUND_DNSCRYPT_H
#define UNBOUND_DNSCRYPT_H

 
#include "dnscrypt/dnscrypt_config.h"
#ifdef USE_DNSCRYPT
 
#define DNSCRYPT_MAGIC_HEADER_LEN 8U
#define DNSCRYPT_MAGIC_RESPONSE  "r6fnvWj8"
 
#ifndef DNSCRYPT_MAX_PADDING
# define DNSCRYPT_MAX_PADDING 256U
#endif
#ifndef DNSCRYPT_BLOCK_SIZE
# define DNSCRYPT_BLOCK_SIZE 64U
#endif
#ifndef DNSCRYPT_MIN_PAD_LEN
# define DNSCRYPT_MIN_PAD_LEN 8U
#endif
 
#define crypto_box_HALF_NONCEBYTES (crypto_box_NONCEBYTES / 2U)
 
#include "config.h"
#include "dnscrypt/cert.h"
#include "util/locks.h"
 
#define DNSCRYPT_QUERY_HEADER_SIZE \
    (DNSCRYPT_MAGIC_HEADER_LEN + crypto_box_PUBLICKEYBYTES + crypto_box_HALF_NONCEBYTES + crypto_box_MACBYTES)
#define DNSCRYPT_RESPONSE_HEADER_SIZE \
    (DNSCRYPT_MAGIC_HEADER_LEN + crypto_box_NONCEBYTES + crypto_box_MACBYTES)
 
#define DNSCRYPT_REPLY_HEADER_SIZE \
    (DNSCRYPT_MAGIC_HEADER_LEN + crypto_box_HALF_NONCEBYTES * 2 + crypto_box_MACBYTES)
 
struct sldns_buffer;
struct config_file;
struct comm_reply;
struct slabhash;
 
typedef struct KeyPair_ {
    uint8_t crypt_publickey[crypto_box_PUBLICKEYBYTES];
    uint8_t crypt_secretkey[crypto_box_SECRETKEYBYTES];
} KeyPair;
 
typedef struct cert_ {
    uint8_t magic_query[DNSCRYPT_MAGIC_HEADER_LEN];
    uint8_t es_version[2];
    KeyPair *keypair;
} dnsccert;
 
struct dnsc_env {
    struct SignedCert *signed_certs;
    struct SignedCert **rotated_certs;
    dnsccert *certs;
    size_t signed_certs_count;
    size_t rotated_certs_count;
    uint8_t provider_publickey[crypto_sign_ed25519_PUBLICKEYBYTES];
    uint8_t provider_secretkey[crypto_sign_ed25519_SECRETKEYBYTES];
    KeyPair *keypairs;
    size_t keypairs_count;
    uint64_t nonce_ts_last;
    unsigned char hash_key[crypto_shorthash_KEYBYTES];
    char * provider_name;

    struct slabhash *shared_secrets_cache;
    lock_basic_type shared_secrets_cache_lock;
    size_t num_query_dnscrypt_secret_missed_cache;

    struct slabhash *nonces_cache;
    lock_basic_type nonces_cache_lock;
    size_t num_query_dnscrypt_replay;
};
 
struct dnscrypt_query_header {
    uint8_t magic_query[DNSCRYPT_MAGIC_HEADER_LEN];
    uint8_t publickey[crypto_box_PUBLICKEYBYTES];
    uint8_t nonce[crypto_box_HALF_NONCEBYTES];
    uint8_t mac[crypto_box_MACBYTES];
};

struct dnsc_env * dnsc_create(void);

int dnsc_apply_cfg(struct dnsc_env *env, struct config_file *cfg);

void dnsc_delete(struct dnsc_env *env);

int dnsc_handle_curved_request(struct dnsc_env* dnscenv,
                               struct comm_reply* repinfo);
 
int dnsc_handle_uncurved_request(struct comm_reply *repinfo);

size_t dnsc_shared_secrets_sizefunc(void *k, void *d);

int dnsc_shared_secrets_compfunc(void *m1, void *m2);

void dnsc_shared_secrets_delkeyfunc(void *k, void* arg);

void dnsc_shared_secrets_deldatafunc(void* d, void* arg);

size_t dnsc_nonces_sizefunc(void *k, void *d);

int dnsc_nonces_compfunc(void *m1, void *m2);

void dnsc_nonces_delkeyfunc(void *k, void* arg);

void dnsc_nonces_deldatafunc(void* d, void* arg);
 
 
#endif /* USE_DNSCRYPT */
#endif