xs/TODO.txt

39 lines
1.5 KiB
Text
Raw Normal View History

2018-06-30 03:29:07 +00:00
HKExSh TODO Ideas
2018-06-30 03:30:33 +00:00
--
Chaff Improvements
- Zipf or other distributions for chaff freq, packetsz
- Mimicry of hand-typed traffic for chaff on interactive sessions
- Client-input chaff file data (ie., Moby Dick)
KEx: Look at ECIES: https://godoc.org/github.com/bitherhq/go-bither/crypto/ecies
ThreeBears? BIKE?, NTRU?: https://www.safecrypto.eu/pqclounge/
NIST Round 1 submissions:
https://csrc.nist.gov/projects/post-quantum-cryptography/round-1-submissions
2018-06-30 03:30:33 +00:00
Architecture
2018-07-20 05:39:06 +00:00
(DONE) - Move hkexnet components other than key exchange into a proper hkex package
2018-06-30 03:30:33 +00:00
(ie., hkexsh imports hkex) - hkex should be usable for other client/svr utils,
ala 'hkex-netcat')
(parts split out into hkexnet/*, hkexsession.go)
(DONE) - Make KEx fully-pluggable: isolate all code to do with Herradura into a
2018-06-30 03:30:33 +00:00
KEx-neutral pkg so it can be swapped out for other methods (eg., DH etc.)
(DONE - test branch) - Use system password db (/etc/{passwd,shadow})
2018-06-30 03:30:33 +00:00
Features
(DONE) - Support for hkcp (hkex-cp) - secure file copy protocol
(DONE) - auth tokens to allow scripted hkexsh/hkexcp use
(DONE) - tunnelling - multiple tunnel sessions co-existing w/shell sessions
- non-interactive tunnel-only mode
- reverse tunnels
2018-06-30 03:30:33 +00:00
Alternate transports for hkexsh.Conn - HTTP-mimicking traffic, ICMP, ... ?
(Whatever golang can support for net.Dial(), net.Accept(), io.Reader/Writer
should in principle be usable as substrate for hkex.Conn)
Install
(DONE - openrc) - init scripts for open-rc/init (and systemd, sigh)
(DONE) - make install
- common packages (yum/deb/portage)
2018-06-30 03:30:33 +00:00