mtg/mtglib/internal/obfuscated2/handshake_frame.go

package obfuscated2

const (
	DefaultDC = 2

	handshakeFrameLen = 64

	handshakeFrameLenKey            = 32
	handshakeFrameLenIV             = 16
	handshakeFrameLenConnectionType = 4

	handshakeFrameOffsetStart          = 8
	handshakeFrameOffsetKey            = handshakeFrameOffsetStart
	handshakeFrameOffsetIV             = handshakeFrameOffsetKey + handshakeFrameLenKey
	handshakeFrameOffsetConnectionType = handshakeFrameOffsetIV + handshakeFrameLenIV
	handshakeFrameOffsetDC             = handshakeFrameOffsetConnectionType + handshakeFrameLenConnectionType
)

// Connection-Type: Secure. We support only fake tls.
var handshakeConnectionType = []byte{0xdd, 0xdd, 0xdd, 0xdd}

// A structure of obfuscated2 handshake frame is following:
//
//    [frameOffsetFirst:frameOffsetKey:frameOffsetIV:frameOffsetMagic:frameOffsetDC:frameOffsetEnd].
//
//    - 8 bytes of noise
//    - 32 bytes of AES Key
//    - 16 bytes of AES IV
//    - 4 bytes of 'connection type' - this has some setting like a connection type
//    - 2 bytes of 'DC'. DC is little endian int16
//    - 2 bytes of noise
type handshakeFrame struct {
	data [handshakeFrameLen]byte
}

func (h *handshakeFrame) dc() int {
	idx := int16(h.data[handshakeFrameOffsetDC]) | int16(h.data[handshakeFrameOffsetDC+1])<<8 // nolint: gomnd, lll // little endian for int16 is here

	switch {
	case idx > 0:
		return int(idx)
	case idx < 0:
		return -int(idx)
	default:
		return DefaultDC
	}
}

func (h *handshakeFrame) key() []byte {
	return h.data[handshakeFrameOffsetKey:handshakeFrameOffsetIV]
}

func (h *handshakeFrame) iv() []byte {
	return h.data[handshakeFrameOffsetIV:handshakeFrameOffsetConnectionType]
}

func (h *handshakeFrame) connectionType() []byte {
	return h.data[handshakeFrameOffsetConnectionType:handshakeFrameOffsetDC]
}

func (h *handshakeFrame) invert() handshakeFrame {
	copyFrame := *h

	for i := 0; i < handshakeFrameLenKey+handshakeFrameLenIV; i++ {
		copyFrame.data[handshakeFrameOffsetKey+i] = h.data[handshakeFrameOffsetConnectionType-1-i]
	}

	return copyFrame
}