{

typedef Tag<512> PublicKey;

public:

Reseeder();

~Reseeder();

bool reseedNow(); // depreacted

int ReseedNowSU3 ();

void LoadCertificates ();

private:

void LoadCertificate (const std::string& filename);

std::string LoadCertificate (CryptoPP::ByteQueue& queue); // returns issuer's name

int ReseedFromSU3 (const std::string& host, bool https = false);

int ProcessSU3File (const char * filename);

int ProcessSU3Stream (std::istream& s);

bool FindZipDataDescriptor (std::istream& s);

std::string HttpsRequest (const std::string& address);

private:

std::map<std::string, PublicKey> m_SigningKeys;

{

public:

virtual ~TlsCipher () {};

virtual void CalculateMAC (uint8_t type, const uint8_t * buf, size_t len, uint8_t * mac) = 0;

virtual size_t Encrypt (const uint8_t * in, size_t len, const uint8_t * mac, uint8_t * out) = 0;

virtual size_t Decrypt (uint8_t * buf, size_t len) = 0;

virtual size_t GetIVSize () const { return 0; }; // override for AES

{

public:

TlsSession (const std::string& host, int port);

~TlsSession ();

void Send (const uint8_t * buf, size_t len);

bool Receive (std::ostream& rs);

bool IsEstablished () const { return m_IsEstablished; };

private:

void Handshake ();

void SendHandshakeMsg (uint8_t handshakeType, uint8_t * data, size_t len);

void SendFinishedMsg ();

CryptoPP::RSA::PublicKey ExtractPublicKey (const uint8_t * certificate, size_t len);

void PRF (const uint8_t * secret, const char * label, const uint8_t * random, size_t randomLen,

size_t len, uint8_t * buf);

private:

bool m_IsEstablished;

boost::asio::ip::tcp::iostream m_Site;

CryptoPP::SHA256 m_FinishedHash;

uint8_t m_MasterSecret[64]; // actual size is 48, but must be multiple of 32

TlsCipher * m_Cipher;