sing-box/common/ktls/ktls_cipher_suites_linux.go

// Copyright 2010 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

//go:build linux && go1.25 && badlinkname

package ktls

import (
	"crypto/tls"
	"unsafe"

	"github.com/sagernet/sing-box/common/badtls"
)

type kernelCryptoCipherType uint16

const (
	TLS_CIPHER_AES_GCM_128              kernelCryptoCipherType = 51
	TLS_CIPHER_AES_GCM_128_IV_SIZE      kernelCryptoCipherType = 8
	TLS_CIPHER_AES_GCM_128_KEY_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_AES_GCM_128_SALT_SIZE    kernelCryptoCipherType = 4
	TLS_CIPHER_AES_GCM_128_TAG_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_AES_GCM_128_REC_SEQ_SIZE kernelCryptoCipherType = 8

	TLS_CIPHER_AES_GCM_256              kernelCryptoCipherType = 52
	TLS_CIPHER_AES_GCM_256_IV_SIZE      kernelCryptoCipherType = 8
	TLS_CIPHER_AES_GCM_256_KEY_SIZE     kernelCryptoCipherType = 32
	TLS_CIPHER_AES_GCM_256_SALT_SIZE    kernelCryptoCipherType = 4
	TLS_CIPHER_AES_GCM_256_TAG_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_AES_GCM_256_REC_SEQ_SIZE kernelCryptoCipherType = 8

	TLS_CIPHER_AES_CCM_128              kernelCryptoCipherType = 53
	TLS_CIPHER_AES_CCM_128_IV_SIZE      kernelCryptoCipherType = 8
	TLS_CIPHER_AES_CCM_128_KEY_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_AES_CCM_128_SALT_SIZE    kernelCryptoCipherType = 4
	TLS_CIPHER_AES_CCM_128_TAG_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_AES_CCM_128_REC_SEQ_SIZE kernelCryptoCipherType = 8

	TLS_CIPHER_CHACHA20_POLY1305              kernelCryptoCipherType = 54
	TLS_CIPHER_CHACHA20_POLY1305_IV_SIZE      kernelCryptoCipherType = 12
	TLS_CIPHER_CHACHA20_POLY1305_KEY_SIZE     kernelCryptoCipherType = 32
	TLS_CIPHER_CHACHA20_POLY1305_SALT_SIZE    kernelCryptoCipherType = 0
	TLS_CIPHER_CHACHA20_POLY1305_TAG_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_CHACHA20_POLY1305_REC_SEQ_SIZE kernelCryptoCipherType = 8

	// TLS_CIPHER_SM4_GCM              kernelCryptoCipherType = 55
	// TLS_CIPHER_SM4_GCM_IV_SIZE      kernelCryptoCipherType = 8
	// TLS_CIPHER_SM4_GCM_KEY_SIZE     kernelCryptoCipherType = 16
	// TLS_CIPHER_SM4_GCM_SALT_SIZE    kernelCryptoCipherType = 4
	// TLS_CIPHER_SM4_GCM_TAG_SIZE     kernelCryptoCipherType = 16
	// TLS_CIPHER_SM4_GCM_REC_SEQ_SIZE kernelCryptoCipherType = 8

	// TLS_CIPHER_SM4_CCM              kernelCryptoCipherType = 56
	// TLS_CIPHER_SM4_CCM_IV_SIZE      kernelCryptoCipherType = 8
	// TLS_CIPHER_SM4_CCM_KEY_SIZE     kernelCryptoCipherType = 16
	// TLS_CIPHER_SM4_CCM_SALT_SIZE    kernelCryptoCipherType = 4
	// TLS_CIPHER_SM4_CCM_TAG_SIZE     kernelCryptoCipherType = 16
	// TLS_CIPHER_SM4_CCM_REC_SEQ_SIZE kernelCryptoCipherType = 8

	TLS_CIPHER_ARIA_GCM_128              kernelCryptoCipherType = 57
	TLS_CIPHER_ARIA_GCM_128_IV_SIZE      kernelCryptoCipherType = 8
	TLS_CIPHER_ARIA_GCM_128_KEY_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_ARIA_GCM_128_SALT_SIZE    kernelCryptoCipherType = 4
	TLS_CIPHER_ARIA_GCM_128_TAG_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_ARIA_GCM_128_REC_SEQ_SIZE kernelCryptoCipherType = 8

	TLS_CIPHER_ARIA_GCM_256              kernelCryptoCipherType = 58
	TLS_CIPHER_ARIA_GCM_256_IV_SIZE      kernelCryptoCipherType = 8
	TLS_CIPHER_ARIA_GCM_256_KEY_SIZE     kernelCryptoCipherType = 32
	TLS_CIPHER_ARIA_GCM_256_SALT_SIZE    kernelCryptoCipherType = 4
	TLS_CIPHER_ARIA_GCM_256_TAG_SIZE     kernelCryptoCipherType = 16
	TLS_CIPHER_ARIA_GCM_256_REC_SEQ_SIZE kernelCryptoCipherType = 8
)

type kernelCrypto interface {
	String() string
}

type kernelCryptoInfo struct {
	version     uint16
	cipher_type kernelCryptoCipherType
}

var _ kernelCrypto = &kernelCryptoAES128GCM{}

type kernelCryptoAES128GCM struct {
	kernelCryptoInfo
	iv      [TLS_CIPHER_AES_GCM_128_IV_SIZE]byte
	key     [TLS_CIPHER_AES_GCM_128_KEY_SIZE]byte
	salt    [TLS_CIPHER_AES_GCM_128_SALT_SIZE]byte
	rec_seq [TLS_CIPHER_AES_GCM_128_REC_SEQ_SIZE]byte
}

func (crypto *kernelCryptoAES128GCM) String() string {
	crypto.cipher_type = TLS_CIPHER_AES_GCM_128
	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
}

var _ kernelCrypto = &kernelCryptoAES256GCM{}

type kernelCryptoAES256GCM struct {
	kernelCryptoInfo
	iv      [TLS_CIPHER_AES_GCM_256_IV_SIZE]byte
	key     [TLS_CIPHER_AES_GCM_256_KEY_SIZE]byte
	salt    [TLS_CIPHER_AES_GCM_256_SALT_SIZE]byte
	rec_seq [TLS_CIPHER_AES_GCM_256_REC_SEQ_SIZE]byte
}

func (crypto *kernelCryptoAES256GCM) String() string {
	crypto.cipher_type = TLS_CIPHER_AES_GCM_256
	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
}

var _ kernelCrypto = &kernelCryptoAES128CCM{}

type kernelCryptoAES128CCM struct {
	kernelCryptoInfo
	iv      [TLS_CIPHER_AES_CCM_128_IV_SIZE]byte
	key     [TLS_CIPHER_AES_CCM_128_KEY_SIZE]byte
	salt    [TLS_CIPHER_AES_CCM_128_SALT_SIZE]byte
	rec_seq [TLS_CIPHER_AES_CCM_128_REC_SEQ_SIZE]byte
}

func (crypto *kernelCryptoAES128CCM) String() string {
	crypto.cipher_type = TLS_CIPHER_AES_CCM_128
	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
}

var _ kernelCrypto = &kernelCryptoChacha20Poly1035{}

type kernelCryptoChacha20Poly1035 struct {
	kernelCryptoInfo
	iv      [TLS_CIPHER_CHACHA20_POLY1305_IV_SIZE]byte
	key     [TLS_CIPHER_CHACHA20_POLY1305_KEY_SIZE]byte
	salt    [TLS_CIPHER_CHACHA20_POLY1305_SALT_SIZE]byte
	rec_seq [TLS_CIPHER_CHACHA20_POLY1305_REC_SEQ_SIZE]byte
}

func (crypto *kernelCryptoChacha20Poly1035) String() string {
	crypto.cipher_type = TLS_CIPHER_CHACHA20_POLY1305
	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
}

// var _ kernelCrypto = &kernelCryptoSM4GCM{}

// type kernelCryptoSM4GCM struct {
// 	kernelCryptoInfo
// 	iv      [TLS_CIPHER_SM4_GCM_IV_SIZE]byte
// 	key     [TLS_CIPHER_SM4_GCM_KEY_SIZE]byte
// 	salt    [TLS_CIPHER_SM4_GCM_SALT_SIZE]byte
// 	rec_seq [TLS_CIPHER_SM4_GCM_REC_SEQ_SIZE]byte
// }

// func (crypto *kernelCryptoSM4GCM) String() string {
// 	crypto.cipher_type = TLS_CIPHER_SM4_GCM
// 	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
// }

// var _ kernelCrypto = &kernelCryptoSM4CCM{}

// type kernelCryptoSM4CCM struct {
// 	kernelCryptoInfo
// 	iv      [TLS_CIPHER_SM4_CCM_IV_SIZE]byte
// 	key     [TLS_CIPHER_SM4_CCM_KEY_SIZE]byte
// 	salt    [TLS_CIPHER_SM4_CCM_SALT_SIZE]byte
// 	rec_seq [TLS_CIPHER_SM4_CCM_REC_SEQ_SIZE]byte
// }

// func (crypto *kernelCryptoSM4CCM) String() string {
// 	crypto.cipher_type = TLS_CIPHER_SM4_CCM
// 	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
// }

var _ kernelCrypto = &kernelCryptoARIA128GCM{}

type kernelCryptoARIA128GCM struct {
	kernelCryptoInfo
	iv      [TLS_CIPHER_ARIA_GCM_128_IV_SIZE]byte
	key     [TLS_CIPHER_ARIA_GCM_128_KEY_SIZE]byte
	salt    [TLS_CIPHER_ARIA_GCM_128_SALT_SIZE]byte
	rec_seq [TLS_CIPHER_ARIA_GCM_128_REC_SEQ_SIZE]byte
}

func (crypto *kernelCryptoARIA128GCM) String() string {
	crypto.cipher_type = TLS_CIPHER_ARIA_GCM_128
	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
}

var _ kernelCrypto = &kernelCryptoARIA256GCM{}

type kernelCryptoARIA256GCM struct {
	kernelCryptoInfo
	iv      [TLS_CIPHER_ARIA_GCM_256_IV_SIZE]byte
	key     [TLS_CIPHER_ARIA_GCM_256_KEY_SIZE]byte
	salt    [TLS_CIPHER_ARIA_GCM_256_SALT_SIZE]byte
	rec_seq [TLS_CIPHER_ARIA_GCM_256_REC_SEQ_SIZE]byte
}

func (crypto *kernelCryptoARIA256GCM) String() string {
	crypto.cipher_type = TLS_CIPHER_ARIA_GCM_256
	return string((*[unsafe.Sizeof(*crypto)]byte)(unsafe.Pointer(crypto))[:])
}

func kernelCipher(kernel *Support, hc *badtls.RawHalfConn, cipherSuite uint16, isRX bool) kernelCrypto {
	if !kernel.TLS {
		return nil
	}

	switch *hc.Version {
	case tls.VersionTLS12:
		if isRX && !kernel.TLS_Version13_RX {
			return nil
		}

	case tls.VersionTLS13:
		if !kernel.TLS_Version13 {
			return nil
		}

		if isRX && !kernel.TLS_Version13_RX {
			return nil
		}

	default:
		return nil
	}

	var key, iv []byte
	if *hc.Version == tls.VersionTLS13 {
		key, iv = trafficKey(cipherSuiteTLS13ByID(cipherSuite), *hc.TrafficSecret)
		/*if isRX {
			key, iv = trafficKey(cipherSuiteTLS13ByID(cipherSuite), keyLog.RemoteTrafficSecret)
		} else {
			key, iv = trafficKey(cipherSuiteTLS13ByID(cipherSuite), keyLog.TrafficSecret)
		}*/
	} else {
		// csPtr := cipherSuiteByID(cipherSuite)
		// keysFromMasterSecret(*hc.Version, csPtr, keyLog.Secret, keyLog.Random)
		return nil
	}

	switch cipherSuite {
	case tls.TLS_AES_128_GCM_SHA256, tls.TLS_RSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:
		crypto := new(kernelCryptoAES128GCM)

		crypto.version = *hc.Version
		copy(crypto.key[:], key)
		copy(crypto.iv[:], iv[4:])
		copy(crypto.salt[:], iv[:4])
		crypto.rec_seq = *hc.Seq

		return crypto
	case tls.TLS_AES_256_GCM_SHA384, tls.TLS_RSA_WITH_AES_256_GCM_SHA384, tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:
		if !kernel.TLS_AES_256_GCM {
			return nil
		}

		crypto := new(kernelCryptoAES256GCM)

		crypto.version = *hc.Version
		copy(crypto.key[:], key)
		copy(crypto.iv[:], iv[4:])
		copy(crypto.salt[:], iv[:4])
		crypto.rec_seq = *hc.Seq

		return crypto
	//case tls.TLS_AES_128_CCM_SHA256, tls.TLS_RSA_WITH_AES_128_CCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_AES_128_CCM_SHA256:
	//	if !kernel.TLS_AES_128_CCM {
	//		return nil
	//	}
	//
	//	crypto := new(kernelCryptoAES128CCM)
	//
	//	crypto.version = *hc.Version
	//	copy(crypto.key[:], key)
	//	copy(crypto.iv[:], iv[4:])
	//	copy(crypto.salt[:], iv[:4])
	//	crypto.rec_seq = *hc.Seq
	//
	//	return crypto
	case tls.TLS_CHACHA20_POLY1305_SHA256, tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:
		if !kernel.TLS_CHACHA20_POLY1305 {
			return nil
		}

		crypto := new(kernelCryptoChacha20Poly1035)

		crypto.version = *hc.Version
		copy(crypto.key[:], key)
		copy(crypto.iv[:], iv)
		crypto.rec_seq = *hc.Seq

		return crypto
	//case tls.TLS_RSA_WITH_ARIA_128_GCM_SHA256, tls.TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256:
	//	if !kernel.TLS_ARIA_GCM {
	//		return nil
	//	}
	//
	//	crypto := new(kernelCryptoARIA128GCM)
	//
	//	crypto.version = *hc.Version
	//	copy(crypto.key[:], key)
	//	copy(crypto.iv[:], iv[4:])
	//	copy(crypto.salt[:], iv[:4])
	//	crypto.rec_seq = *hc.Seq
	//
	//	return crypto
	//case tls.TLS_RSA_WITH_ARIA_256_GCM_SHA384, tls.TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384, tls.TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384:
	//	if !kernel.TLS_ARIA_GCM {
	//		return nil
	//	}
	//
	//	crypto := new(kernelCryptoARIA256GCM)
	//
	//	crypto.version = *hc.Version
	//	copy(crypto.key[:], key)
	//	copy(crypto.iv[:], iv[4:])
	//	copy(crypto.salt[:], iv[:4])
	//	crypto.rec_seq = *hc.Seq
	//
	//	return crypto
	default:
		return nil
	}
}