1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
//! # PQ-PSK
//!
//! This crate implements a protocol for establishing and mutually
//! registering a PQ-PSK between an initiator and a responder.
//!
//! ```rust
//! use rand::RngCore;
//! use libcrux_ml_kem::mlkem768::MlKem768KeyPair;
//! use tls_codec::{Serialize, Deserialize};
//! use libcrux_psq::{
//! handshake::{builders::*, ciphersuites::*, types::*, HandshakeError},
//! session::{Session, SessionError, SessionBinding},
//! Channel, IntoSession,
//! };
//!
//! let mut rng = rand::rng();
//!
//! // External setup: Responder keys
//! let responder_mlkem_keys = libcrux_ml_kem::mlkem768::rand::generate_key_pair(&mut rng);
//!
//! let responder_ecdh_keys = DHKeyPair::new(&mut rng);
//!
//! // External setup: Initiator keys
//! let initiator_ecdh_keys = DHKeyPair::new(&mut rng);
//!
//! let ctx = b"Test Context";
//! let aad_initiator_query = b"Test Data Initiator Query";
//! let aad_initiator_outer = b"Test Data I Outer";
//! let aad_initiator_inner = b"Test Data I Inner";
//! let aad_responder = b"Test Data R";
//!
//! let mut msg_channel = vec![0u8; 4096];
//! let mut payload_buf_responder = vec![0u8; 4096];
//! let mut payload_buf_initiator = vec![0u8; 4096];
//!
//! let responder_ciphersuite_id = CiphersuiteName::X25519_MLKEM768_X25519_CHACHA20POLY1305_HKDFSHA256;
//!
//! // Setup query initiator
//! let mut query_initiator = PrincipalBuilder::new(rand::rng())
//! .outer_aad(aad_initiator_query)
//! .context(ctx)
//! .build_query_initiator(&responder_ecdh_keys.pk)
//! .unwrap();
//!
//! // Setup responder
//! let mut responder_ciphersuite = CiphersuiteBuilder::new(responder_ciphersuite_id)
//! .longterm_x25519_keys(&responder_ecdh_keys)
//! .longterm_mlkem_encapsulation_key(responder_mlkem_keys.public_key())
//! .longterm_mlkem_decapsulation_key(responder_mlkem_keys.private_key())
//! .build_responder_ciphersuite().unwrap();
//!
//! let mut responder = PrincipalBuilder::new(rand::rng())
//! .context(ctx)
//! .outer_aad(aad_responder)
//! .recent_keys_upper_bound(30)
//! .build_responder(responder_ciphersuite).unwrap();
//!
//! // Query the responder for its ciphersuite
//! let query_payload_initiator = b"Query_init"; // This message is application defined
//! let len_i = query_initiator
//! .write_message(query_payload_initiator, &mut msg_channel)
//! .unwrap();
//!
//! // Read first message at the responder
//! let (len_r_deserialized, len_r_payload) = responder
//! .read_message(&msg_channel, &mut payload_buf_responder)
//! .unwrap();
//!
//! // Respond
//! let query_payload_responder = responder_ciphersuite_id.tls_serialize_detached().unwrap();
//! let len_r = responder
//! .write_message(&query_payload_responder, &mut msg_channel)
//! .unwrap();
//!
//! // Finalize on query initiator
//! let (len_i_deserialized, len_i_payload) = query_initiator
//! .read_message(&msg_channel, &mut payload_buf_initiator)
//! .unwrap();
//!
//! let responder_ciphersuite_id_received = CiphersuiteName::tls_deserialize(&mut std::io::Cursor::new(&payload_buf_initiator)).unwrap();
//!
//! assert_eq!(responder_ciphersuite_id, responder_ciphersuite_id_received);
//!
//! // Setup Registration initiator with received ciphersuite
//! let initiator_ciphersuite = CiphersuiteBuilder::new(responder_ciphersuite_id_received)
//! .longterm_x25519_keys(&initiator_ecdh_keys)
//! .peer_longterm_x25519_pk(&responder_ecdh_keys.pk)
//! .peer_longterm_mlkem_pk(responder_mlkem_keys.public_key())
//! .build_initiator_ciphersuite().unwrap();
//!
//! let mut initiator = PrincipalBuilder::new(rand::rng())
//! .outer_aad(aad_initiator_outer)
//! .inner_aad(aad_initiator_inner)
//! .context(ctx)
//! .build_registration_initiator(initiator_ciphersuite).unwrap();
//!
//! // Send first message
//! let registration_payload_initiator = b"Registration_init";
//! let len_i = initiator.write_message(registration_payload_initiator, &mut msg_channel).unwrap();
//!
//! // Read first message
//! let (len_r_deserialized, len_r_payload) =
//! responder.read_message(&msg_channel, &mut payload_buf_responder).unwrap();
//!
//! // Respond
//! let registration_payload_responder = b"Registration_respond";
//! let len_r = responder.write_message(registration_payload_responder, &mut msg_channel).unwrap();
//!
//! // Finalize on registration initiator
//! let (len_i_deserialized, len_i_payload) =
//! initiator.read_message(&msg_channel, &mut payload_buf_initiator).unwrap();
//!
//! // Ready for transport mode
//! assert!(initiator.is_handshake_finished());
//! assert!(responder.is_handshake_finished());
//!
//! let i_transport = initiator.into_session().unwrap();
//! let mut r_transport = responder.into_session().unwrap();
//!
//! // test serialization, deserialization
//! let mut session_storage = vec![0u8; 4096];
//! i_transport.serialize(&mut session_storage,
//! SessionBinding {
//! initiator_authenticator: &(&initiator_ecdh_keys.pk).authenticator(),
//! responder_ecdh_pk: &responder_ecdh_keys.pk,
//! responder_pq_pk: Some(responder_mlkem_keys.public_key().into())
//! }).unwrap();
//!
//! let mut i_transport = Session::deserialize(
//! &session_storage,
//! SessionBinding {
//! initiator_authenticator: &(&initiator_ecdh_keys.pk).authenticator(),
//! responder_ecdh_pk: &responder_ecdh_keys.pk,
//! responder_pq_pk: Some(responder_mlkem_keys.public_key().into())
//! }
//! ).unwrap();
//!
//! let mut channel_i = i_transport.transport_channel().unwrap();
//! let mut channel_r = r_transport.transport_channel().unwrap();
//!
//! assert_eq!(channel_i.identifier(), channel_r.identifier());
//!
//! let app_data_i = b"Derived session hey".as_slice();
//! let app_data_r = b"Derived session ho".as_slice();
//!
//! let len_i = channel_i.write_message(app_data_i, &mut msg_channel).unwrap();
//!
//! let (len_r_deserialized, len_r_payload) =
//! channel_r.read_message(&msg_channel, &mut payload_buf_responder).unwrap();
//!
//! let len_r = channel_r.write_message(app_data_r, &mut msg_channel).unwrap();
//!
//! let (len_i_deserialized, len_i_payload) =
//! channel_i.read_message(&msg_channel, &mut payload_buf_initiator).unwrap();
//! ```
pub use ;