From bb705a77cf8d9ce49bf3f3c38c6c6253b036a126 Mon Sep 17 00:00:00 2001 From: orignal Date: Wed, 11 May 2022 17:48:25 -0400 Subject: [PATCH] handle PeerTest message --- libi2pd/SSU2.cpp | 58 +++++++++++++++++++++++++++++++++++++++++------- libi2pd/SSU2.h | 3 +++ 2 files changed, 53 insertions(+), 8 deletions(-) diff --git a/libi2pd/SSU2.cpp b/libi2pd/SSU2.cpp index 231333ca..da867df4 100644 --- a/libi2pd/SSU2.cpp +++ b/libi2pd/SSU2.cpp @@ -825,6 +825,38 @@ namespace transport return true; } + + bool SSU2Session::ProcessPeerTest (uint8_t * buf, size_t len) + { + // we are Alice or Charlie + Header header; + memcpy (header.buf, buf, 16); + header.ll[0] ^= CreateHeaderMask (i2p::context.GetSSU2IntroKey (), buf + (len - 24)); + header.ll[1] ^= CreateHeaderMask (i2p::context.GetSSU2IntroKey (), buf + (len - 12)); + if (header.h.type != eSSU2PeerTest) + { + LogPrint (eLogWarning, "SSU2: Unexpected message type ", (int)header.h.type); + return false; + } + uint8_t nonce[12] = {0}; + uint64_t headerX[2]; // sourceConnID, token + i2p::crypto::ChaCha20 (buf + 16, 16, i2p::context.GetSSU2IntroKey (), nonce, (uint8_t *)headerX); + m_DestConnID = headerX[0]; + // decrypt and handle payload + uint8_t * payload = buf + 32; + CreateNonce (be32toh (header.h.packetNum), nonce); + uint8_t h[32]; + memcpy (h, header.buf, 16); + memcpy (h + 16, &headerX, 16); + if (!i2p::crypto::AEADChaCha20Poly1305 (payload, len - 48, h, 32, + i2p::context.GetSSU2IntroKey (), nonce, payload, len - 48, false)) + { + LogPrint (eLogWarning, "SSU2: PeerTest AEAD verification failed "); + return false; + } + HandlePayload (payload, len - 48); + return true; + } uint32_t SSU2Session::SendData (const uint8_t * buf, size_t len) { @@ -1837,15 +1869,25 @@ namespace transport } if (m_LastSession) { - if (m_LastSession->IsEstablished ()) - m_LastSession->ProcessData (buf, len); - else if (m_LastSession->GetState () == eSSU2SessionStateIntroduced) - { - m_LastSession->SetRemoteEndpoint (senderEndpoint); - m_LastSession->ProcessHolePunch (buf, len); + switch (m_LastSession->GetState ()) + { + case eSSU2SessionStateEstablished: + m_LastSession->ProcessData (buf, len); + break; + case eSSU2SessionStateUnknown: + m_LastSession->ProcessSessionConfirmed (buf, len); + break; + case eSSU2SessionStateIntroduced: + m_LastSession->SetRemoteEndpoint (senderEndpoint); + m_LastSession->ProcessHolePunch (buf, len); + break; + case eSSU2SessionStatePeerTest: + m_LastSession->SetRemoteEndpoint (senderEndpoint); + m_LastSession->ProcessPeerTest (buf, len); + break; + default: + LogPrint (eLogWarning, "SSU2: Invalid session state ", (int)m_LastSession->GetState ()); } - else - m_LastSession->ProcessSessionConfirmed (buf, len); } else { diff --git a/libi2pd/SSU2.h b/libi2pd/SSU2.h index 4ff6de79..b4369f25 100644 --- a/libi2pd/SSU2.h +++ b/libi2pd/SSU2.h @@ -43,6 +43,7 @@ namespace transport eSSU2SessionCreated = 1, eSSU2SessionConfirmed = 2, eSSU2Data = 6, + eSSU2PeerTest = 7, eSSU2Retry = 9, eSSU2TokenRequest = 10, eSSU2HolePunch = 11 @@ -78,6 +79,7 @@ namespace transport { eSSU2SessionStateUnknown, eSSU2SessionStateIntroduced, + eSSU2SessionStatePeerTest, eSSU2SessionStateEstablished, eSSU2SessionStateTerminated, eSSU2SessionStateFailed @@ -164,6 +166,7 @@ namespace transport bool ProcessSessionConfirmed (uint8_t * buf, size_t len); bool ProcessRetry (uint8_t * buf, size_t len); bool ProcessHolePunch (uint8_t * buf, size_t len); + bool ProcessPeerTest (uint8_t * buf, size_t len); void ProcessData (uint8_t * buf, size_t len); private: