Unpool handshake

Anyway, we are going to use stack here, no need for connection pooling.
Even arrays are allocaed on a stack because we do not use slices here
but real ones.
This commit is contained in:
9seconds
2021-03-18 22:06:52 +03:00
parent 188fa6a04a
commit 8de727932d
2 changed files with 20 additions and 36 deletions
+15 -16
View File
@@ -1,6 +1,7 @@
package obfuscated2
import (
"crypto/aes"
"crypto/cipher"
"crypto/subtle"
"encoding/hex"
@@ -12,41 +13,39 @@ import (
var clientHandshakeConnectionType = []byte{0xdd, 0xdd, 0xdd, 0xdd}
func ClientHandshake(secret []byte, reader io.Reader) (int16, cipher.Stream, cipher.Stream, error) {
handshakeFrame := acquireHandshakeFrame()
defer releaseHandshakeFrame(handshakeFrame)
handshake := handshakeFrame{}
if _, err := io.ReadFull(reader, handshakeFrame.data[:]); err != nil {
if _, err := io.ReadFull(reader, handshake.data[:]); err != nil {
return 0, nil, nil, fmt.Errorf("cannot read frame: %w", err)
}
decHasher := acquireSha256Hasher()
defer releaseSha256Hasher(decHasher)
decHasher.Write(handshakeFrame.key()) // nolint: errcheck
decHasher.Write(secret) // nolint: errcheck
decryptor := makeAesCtr(decHasher.Sum(nil), handshakeFrame.iv())
decHasher.Write(handshake.key()) // nolint: errcheck
decHasher.Write(secret) // nolint: errcheck
decryptor := makeAesCtr(decHasher.Sum(nil), handshake.iv())
encHasher := acquireSha256Hasher()
defer releaseSha256Hasher(encHasher)
invertedFrame := acquireHandshakeFrame()
defer releaseHandshakeFrame(invertedFrame)
invertedHandshake := handshakeFrame{}
for i, v := range handshakeFrame.data {
invertedFrame.data[handshakeFrameLen-1-i] = v
for i, v := range handshake.data {
invertedHandshake.data[handshakeFrameLen-1-i] = v
}
encHasher.Write(invertedFrame.key()) // nolint: errcheck
encHasher.Write(secret) // nolint: errcheck
encryptor := makeAesCtr(encHasher.Sum(nil), invertedFrame.iv())
encHasher.Write(invertedHandshake.key()) // nolint: errcheck
encHasher.Write(secret) // nolint: errcheck
encryptor := makeAesCtr(encHasher.Sum(nil), invertedHandshake.iv())
decryptor.XORKeyStream(handshakeFrame.data[:], handshakeFrame.data[:])
decryptor.XORKeyStream(handshake.data[:], handshake.data[:])
if val := handshakeFrame.connectionType(); subtle.ConstantTimeCompare(clientHandshakeConnectionType, val) != 1 {
if val := handshake.connectionType(); subtle.ConstantTimeCompare(clientHandshakeConnectionType, val) != 1 {
return 0, nil, nil, fmt.Errorf("unsupported connection type: %s", hex.EncodeToString(val))
}
return handshakeFrame.dc(), encryptor, decryptor, nil
return handshake.dc(), encryptor, decryptor, nil
}
func makeAesCtr(key, iv []byte) cipher.Stream {
+5 -20
View File
@@ -6,18 +6,11 @@ import (
"sync"
)
var (
sha256HasherPool = sync.Pool{
New: func() interface{} {
return sha256.New()
},
}
handshakeFramePool = sync.Pool{
New: func() interface{} {
return &handshakeFrame{}
},
}
)
var sha256HasherPool = sync.Pool{
New: func() interface{} {
return sha256.New()
},
}
func acquireSha256Hasher() hash.Hash {
return sha256HasherPool.Get().(hash.Hash)
@@ -27,11 +20,3 @@ func releaseSha256Hasher(h hash.Hash) {
h.Reset()
sha256HasherPool.Put(h)
}
func acquireHandshakeFrame() *handshakeFrame {
return handshakeFramePool.Get().(*handshakeFrame)
}
func releaseHandshakeFrame(h *handshakeFrame) {
handshakeFramePool.Put(h)
}