mirror of
https://github.com/netbirdio/netbird.git
synced 2026-07-17 03:59:56 +00:00
7ea5e37dd4
* Updates rosenpass version go-rosenpass v0.4.0 → v0.5.42 bump — detailed findings Change summary cunicu.li/go-rosenpass v0.4.0 → v0.5.42 (target) cilium/ebpf v0.15.0 → v0.19.0 (transitive) gopacket/gopacket v1.1.1 → v1.4.0 (transitive) wireguard 2023-07 → 2023-12 (transitive) wireguard/wgctrl 2023-04 → 2024-12 (transitive) Wire interop v0.4.0 (in v0.70.5) <-> v0.5.42 OK v0.5.42 <-> v0.5.42 OK Quantum resistance: true both ends --- **Replay error eliminated.** Before (on v0.4.0): `ERROR Failed to handle message: failed to load biscuit (ICR1): detected replay` Recurring every ~50ms for minutes at a time. Gone entirely after both ends upgraded to v0.5.42. Upstream fix in biscuit/replay handling between v0.4.x and v0.5.x series. * Fixup [::]:port socket trying to send to v4 * Adds more tests on netbird<->rosenpass interactions * Anticipates rp handler creation before generateConfig * [client] Moves deterministic key gen into rosenpass * go mod tidy * Adds reminder to reason about rosenpass surface area * Apply code rabbit suggestions
43 lines
1.4 KiB
Go
43 lines
1.4 KiB
Go
package rosenpass
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
|
|
)
|
|
|
|
// DeterministicSeedKey derives a 32-byte WireGuard preshared key from a pair
|
|
// of peer public keys. Both peers, given the same key pair, produce the same
|
|
// output regardless of which side runs the function: the inputs are ordered
|
|
// lexicographically before concatenation.
|
|
//
|
|
// NetBird uses this value as the initial Rosenpass-side preshared key when no
|
|
// explicit account-level PSK is configured, so both peers converge on the same
|
|
// PSK before the first post-quantum handshake completes.
|
|
//
|
|
// The resulting key MUST NOT be treated as quantum-safe: it is deterministic
|
|
// from public keys and exists only to seed WireGuard until Rosenpass rotates
|
|
// in a real post-quantum PSK.
|
|
func DeterministicSeedKey(localKey, remoteKey string) (*wgtypes.Key, error) {
|
|
lk := []byte(localKey)
|
|
rk := []byte(remoteKey)
|
|
if len(lk) < 16 || len(rk) < 16 {
|
|
return nil, fmt.Errorf("rosenpass: peer keys must be at least 16 bytes (got local=%d, remote=%d)", len(lk), len(rk))
|
|
}
|
|
|
|
var keyInput []byte
|
|
if localKey > remoteKey {
|
|
keyInput = append(keyInput, lk[:16]...)
|
|
keyInput = append(keyInput, rk[:16]...)
|
|
} else {
|
|
keyInput = append(keyInput, rk[:16]...)
|
|
keyInput = append(keyInput, lk[:16]...)
|
|
}
|
|
|
|
key, err := wgtypes.NewKey(keyInput)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("rosenpass: deterministic seed key: %w", err)
|
|
}
|
|
return &key, nil
|
|
}
|