dnscrypt-protocol/reference-implementation/protocol_types.py at master · DNSCrypt/dnscrypt-protocol · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
"""Data containers shared by the classical and PQ packet modules."""

from __future__ import annotations

from dataclasses import dataclass

from certificates import DNSCryptCertificate

__all__ = [
    "DecryptedQuery",
    "PreparedQuery",
    "ResolverCertificate",
]


@dataclass(frozen=True)
class ResolverCertificate:
    """A certificate paired with the resolver secret needed to open queries."""

    certificate: DNSCryptCertificate
    resolver_sk: bytes


@dataclass(frozen=True)
class PreparedQuery:
    """A newly encrypted query and the state needed to decrypt its response.

    `client_pk` mirrors the wire `<client-pk>` slot: an X25519 public key for
    es-version 0x0002, an X-Wing ciphertext for 0x0003, or the resumption
    ticket in a resumed query.
    """

    dnscrypt_query: bytes
    shared_key: bytes
    client_pk: bytes
    client_nonce: bytes


@dataclass(frozen=True)
class DecryptedQuery:
    """A decrypted resolver-side query and its response-encryption state.

    `client_pk` mirrors the wire `<client-pk>` slot, as in `PreparedQuery`.
    """

    client_query: bytes
    shared_key: bytes
    client_pk: bytes
    client_nonce: bytes
    certificate: DNSCryptCertificate