Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PSK support #983

Open
dignifiedquire opened this issue May 8, 2023 · 2 comments
Open

PSK support #983

dignifiedquire opened this issue May 8, 2023 · 2 comments
Labels
c-iroh-net feat New feature or request

Comments

@dignifiedquire
Copy link
Contributor

dignifiedquire commented May 8, 2023

In order to have secure authentication for connections, and allow creating things like private networks, we need some form of pre shared key encryption support.

Using https://datatracker.ietf.org/doc/html/rfc8773 we should be able to add pre shared key support on a network level.

Before we can use this, we need support for this in rustls: rustls/rustls#174

Looking at the comments in the linked rustls issue, we might be able to use an even more rustls native approach. This needs more design & review of RFCs and implementation.s

@dignifiedquire dignifiedquire added the feat New feature or request label May 8, 2023
@rklaehn
Copy link
Contributor

rklaehn commented May 11, 2023

Hopefully we are still looking into using noise. I think coming up with some PSK scheme should be doable. We don't need to go to TLS for this...

@dignifiedquire
Copy link
Contributor Author

The point is to avoid double encryption, which using TLS would allow us to do. If we do go to noise, it is very easy, as it has builtin PSK support..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c-iroh-net feat New feature or request
Projects
Status: 📋 Backlog
Development

No branches or pull requests

2 participants