Allow exporting key material and init of cipherstate

state.go

@@ -32,6 +32,18 @@ const MaxNonce = uint64(math.MaxUint64) - 1
 var ErrMaxNonce = errors.New("noise: cipherstate has reached maximum n, a new handshake must be performed")
 var ErrCipherSuiteCopied = errors.New("noise: CipherSuite has been copied, state is invalid")
 
+// UnsafeNewCipherState allows a CipherState to be reconstructed from exported components.
+// Note that it is important that, if resuming from exported state, then care is taken
+// to synchronize the nonce state and not allow rollbacks.
+func UnsafeNewCipherState(cs CipherSuite, k [32]byte, n uint64) *CipherState {
+	return &CipherState{
+		cs: cs,
+		c:  cs.Cipher(k),
+		k:  k,
+		n:  n,
+	}
+}
+
 // Encrypt encrypts the plaintext and then appends the ciphertext and an
 // authentication tag across the ciphertext and optional authenticated data to
 // out. This method automatically increments the nonce after every call, so
@@ -91,6 +103,13 @@ func (s *CipherState) SetNonce(n uint64) {
 	s.n = n
 }
 
+// UnsafeKey returns the current value of k. This can be used to export the current key
+// for the CipherState. Intended to be used alongside UnsafeNewCipherState to resume
+// a CipherState at a later point.
+func (s *CipherState) UnsafeKey() [32]byte {
+	return s.k
+}
+
 func (s *CipherState) Rekey() {
 	var zeros [32]byte
 	var out []byte