#async-stream #protocols #noise #encryption #minimalist #tokio #snow

snowstorm

A minimalistic encryption protocol based on Noise protocol (snow)

7 unstable releases (3 breaking)

0.4.0 May 20, 2022
0.3.1 Jan 14, 2022
0.2.0 Jan 3, 2022
0.1.3 Dec 25, 2021

#794 in Cryptography

Download history 1122/week @ 2023-12-10 566/week @ 2023-12-17 437/week @ 2023-12-24 823/week @ 2023-12-31 1538/week @ 2024-01-07 2650/week @ 2024-01-14 3299/week @ 2024-01-21 1544/week @ 2024-01-28 1406/week @ 2024-02-04 987/week @ 2024-02-11 906/week @ 2024-02-18 1225/week @ 2024-02-25 1439/week @ 2024-03-03 1085/week @ 2024-03-10 1254/week @ 2024-03-17 1375/week @ 2024-03-24

5,209 downloads per month
Used in 2 crates

Apache-2.0

32KB
690 lines

Snowstorm

A minimalistic encryption protocol for rust async streams / packets, based on noise protocol and snow.

Quickstart

Snowstorm allows you to secure any streams implemented AsyncRead + AsyncWrite + Unpin. For example, TcpStream in Tokio. Note that the underlying connections need to be reliable.

Create a Key Pair

// Noise protocol params, see: http://www.noiseprotocol.org/noise.html#protocol-names-and-modifiers
// Use `KK` to enable bidirectional identity verification
static PATTERN: &str = "Noise_KK_25519_ChaChaPoly_BLAKE2s"; 

// Generate a private / public key pair
let key_pair = snowstorm::Builder::new(PATTERN.parse()?).generate_keypair().unwrap()

Client


// Connect to the peer
let stream = TcpStream::connect("127.0.0.1:12345").await?;

// The client should build an initiator to launch the handshake process
let initiator = snowstorm::Builder::new(PATTERN.parse()?)
    .local_private_key(local_private_key)
    .remote_public_key(remote_public_key)
    .build_initiator()?;

// Start handshaking
let mut secured_stream = NoiseStream::handshake(stream, initiator).await?;

// A secured stream `NoiseStream<T>` will be return once the handshake is done
secured_stream.write_all(b"hello world").await?;

Server


// Accept a `TcpStream` from the listener
let listener = TcpListener::bind("127.0.0.1:12345").await?;
let (stream, _) = listener.accept().await?;

// The server needs a responder to handle handshake reqeusts from clients
let responder = snowstorm::Builder::new(PATTERN.parse()?)
    .local_private_key(local_private_key)
    .remote_public_key(remote_public_key)
    .build_responder()?;

// Start handshaking
let mut secured_stream = NoiseStream::handshake(stream, responder).await?;

let mut buf = [0; 1024];
secured_stream.read(&mut buf).await?;

Spec

Stream

[ length (2 bytes, little endian) ] [ noise message (length bytes) ]

Packet

[ nonce (8 bytes) ] [ noise message ]

Todo

  • UDP Support
  • Documentation
  • Benchmarks
  • Async-std support

Dependencies

~3.5–5.5MB
~91K SLoC