Initial v1.1.8 Commits

go_client/wrap.go

@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: MIT
+
+package main
+
+import (
+	"crypto/sha256"
+	"errors"
+	"fmt"
+	"io"
+
+	"golang.org/x/crypto/hkdf"
+)
+
+const (
+	wrapKeyLen = 32
+)
+
+func deriveWrapKey(password string) ([]byte, error) {
+	if password == "" {
+		return nil, errors.New("empty password")
+	}
+	key := make([]byte, wrapKeyLen)
+	reader := hkdf.New(
+		sha256.New,
+		[]byte(password),
+		[]byte("WDTT-WRAP-v1"),
+		[]byte("rtp-obfs/chacha20poly1305"),
+	)
+	if _, err := io.ReadFull(reader, key); err != nil {
+		return nil, fmt.Errorf("derive wrap key: %w", err)
+	}
+	return key, nil
+}