net/wireguard/cookie.c

7 #include "peer.h"
44 /* Must hold peer->handshake.static_identity->lock */
61 void wg_cookie_checker_precompute_peer_keys(struct wg_peer *peer)
63 	precompute_key(peer->latest_cookie.cookie_decryption_key,
64 		       peer->handshake.remote_static, cookie_key_label);
65 	precompute_key(peer->latest_cookie.message_mac1_key,
66 		       peer->handshake.remote_static, mac1_key_label);
157 				 struct wg_peer *peer)
162 	down_write(&peer->latest_cookie.lock);
164 		     peer->latest_cookie.message_mac1_key);
165 	memcpy(peer->latest_cookie.last_mac1_sent, macs->mac1, COOKIE_LEN);
166 	peer->latest_cookie.have_sent_mac1 = true;
167 	up_write(&peer->latest_cookie.lock);
169 	down_read(&peer->latest_cookie.lock);
170 	if (peer->latest_cookie.is_valid &&
171 	    !wg_birthdate_has_expired(peer->latest_cookie.birthdate,
174 			     peer->latest_cookie.cookie);
177 	up_read(&peer->latest_cookie.lock);
201 	struct wg_peer *peer = NULL;
208 						src->receiver_index, &peer)))
211 	down_read(&peer->latest_cookie.lock);
212 	if (unlikely(!peer->latest_cookie.have_sent_mac1)) {
213 		up_read(&peer->latest_cookie.lock);
218 		peer->latest_cookie.last_mac1_sent, COOKIE_LEN, src->nonce,
219 		peer->latest_cookie.cookie_decryption_key);
220 	up_read(&peer->latest_cookie.lock);
223 		down_write(&peer->latest_cookie.lock);
224 		memcpy(peer->latest_cookie.cookie, cookie, COOKIE_LEN);
225 		peer->latest_cookie.birthdate = ktime_get_coarse_boottime_ns();
226 		peer->latest_cookie.is_valid = true;
227 		peer->latest_cookie.have_sent_mac1 = false;
228 		up_write(&peer->latest_cookie.lock);
235 	wg_peer_put(peer);