/* 1. 加载国密 Provider */
OSSL_PROVIDER *prov = OSSL_PROVIDER_load(NULL, "sm_provider");
if (!prov) { log_err("SM provider load failed"); return -1; }

/* 2. 创建 SSL_CTX 并绑定国密套件 */
SSL_CTX *ctx = SSL_CTX_new(DTLS_server_method());
SSL_CTX_set_ciphersuites(ctx, "SM4_GCM_SM3:SM4_CCM_SM3"); // TLS 1.3 风格写法
/* 或 DTLS 1.2 兼容写法 */
SSL_CTX_set_cipher_list(ctx, "ECDHE_SM2_SM4_GCM_SM3:ECDHE_SM2_SM4_CCM_SM3");

/* 3. 载入 SM2 证书链与私钥 */
SSL_CTX_use_certificate_chain_file(ctx, "sm2_server.crt");
SSL_CTX_use_PrivateKey_file(ctx, "sm2_server.key", SSL_FILETYPE_PEM);

/* 4. 启用 DTLS-SRTP 保护配置文件 */
SSL_CTX_set_tlsext_use_srtp(ctx, "SRTP_AES128_CM_HMAC_SHA1_80:SRTP_SM4_GCM_SM3"); // 需补丁支持 SM4-GCM-SM3 profile

// cal_sm4.h - 统一 SM4-GCM 接口
typedef enum { CAL_BACKEND_OPENSSL, CAL_BACKEND_HISI_QM, CAL_BACKEND_HYGON_ZIP, CAL_BACKEND_FT_CRYPTO } cal_backend_t;

typedef struct {
    int (*init)(void **ctx, const uint8_t *key, size_t keylen, cal_backend_t backend);
    int (*gcm_enc)(void *ctx, const uint8_t *iv, size_t iv_len, const uint8_t *aad, size_t aad_len,
                   const uint8_t *in, uint8_t *out, size_t len, uint8_t *tag, size_t tag_len);
    int (*gcm_dec)(void *ctx, const uint8_t *iv, size_t iv_len, const uint8_t *aad, size_t aad_len,
                   const uint8_t *in, uint8_t *out, size_t len, const uint8_t *tag, size_t tag_len);
    void (*cleanup)(void *ctx);
} cal_sm4_gcm_ops_t;

/* 运行时自动探测最优后端 */
const cal_sm4_gcm_ops_t *cal_sm4_gcm_select_best(void);

/* 安全内存分配器封装 */
void *secure_alloc(size_t size) {
    void *ptr = mmap(NULL, size, PROT_READ | PROT_WRITE,
                     MAP_PRIVATE | MAP_ANONYMOUS | MAP_LOCKED, -1, 0); // 禁止 Swap
    if (ptr == MAP_FAILED) return NULL;
    // 可选：mprotect(ptr, size, PROT_READ); // 写入后立即设为只读
    return ptr;
}

void secure_free(void *ptr, size_t size) {
    if (!ptr) return;
    explicit_bzero(ptr, size); // 编译器不优化掉的清零
    munmap(ptr, size);
}

/* OpenSSL ENGINE/Provider 回调注入 */
static int sm2_key_gen_cb(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey) {
    // 强制私钥组件 (d) 存入 secure_alloc 区域
    // 需 Patch OpenSSL Provider 或使用 ENGINE_set_RSA/EC_METHOD 替换底层 METHOD
    return 1;
}

graph LR
    A[Code Commit] --> B[SAST/依赖扫描]
    B --> C[单元测试 + GM/T 测试向量]
    C --> D[合规策略检查 OPA/Rego]
    D --> E[集成测试: DTLS-SRTP 互通]
    E --> F[性能基线对比 Benchmark]
    F --> G[镜像签名 SBOM 生成]
    G --> H[部署准入 Gate]

# policy/compliance.rego
package compliance.dtls_srtp

# 禁止国际算法套件出现在生产镜像配置中
deny[msg] {
    input.config.cipher_suites[_] == "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
    msg := "Forbidden international cipher suite in production config"
}

# 强制 SM2 证书有效期 <= 825 天 (密评要求)
deny[msg] {
    cert := input.certificates[_]
    cert.algorithm == "SM2"
    cert.not_after - cert.not_before > 825 * 24 * 3600
    msg := sprintf("SM2 certificate validity exceeds 825 days: %s", [cert.subject])
}

# 强制启用 OCSP Stapling
deny[msg] {
    not input.config.ocsp_stapling_enabled
    msg := "OCSP Stapling must be enabled for production"
}

# 性能回归阈值 (较基线分支不得下降 15%)
deny[msg] {
    input.benchmark.handshake_latency_p99 > 1.15 * data.baseline.handshake_latency_p99
    msg := "Handshake latency regression detected"
}

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "components": [
    {
      "type": "library",
      "name": "openssl-provider-gm",
      "version": "3.0.12-gm-20240501",
      "purl": "pkg:github/openssl/openssl@3.0.12?provider=gm",
      "properties": [
        {"name": "crypto:algorithm", "value": "SM2,SM3,SM4"},
        {"name": "crypto:certification", "value": "GM/T 0028 Level 2"},
        {"name": "crypto:fips_cert", "value": "CMVP #4789"}
      ],
      "hashes": [{"alg": "SHA-256", "content": "..."}]
    }
  ]
}

# Nginx / OpenResty 侧流量分流示例 (基于 SSL_CTX 回调)
server {
    listen 443 udp reuseport;
    
    # 1.0-RTT 优先尝试 DTLS 1.3 国密
    ssl_protocols DTLSv1.3 DTLSv1.2;
    ssl_ciphersuites 'SM4_GCM_SM3:SM4_CCM_SM3';  # TLS 1.3 套件写法
    ssl_ciphers 'ECDHE_SM2_SM4_GCM_SM3:ECDHE_SM2_SM4_CCM_SM3'; # DTLS 1.2 兼容
    
    # 2. 版本协商回调：记录客户端能力，输出 Metrics
    ssl_conf_command Options DTLSv1.3;
    
    # 3. 0-RTT 早期数据风险控制：仅允许幂等业务 (如心跳、配置下发)
    ssl_early_data on;
    ssl_conf_command EarlyData "on";
    
    location /srtp {
        # 业务层判断 $ssl_protocol $ssl_cipher $ssl_early_data
        # 非幂等请求拒绝 0-RTT 数据
        if ($ssl_early_data = "1" && $request_method != "GET") {
            return 425; # Too Early (RFC 8470)
        }
        proxy_pass https://backend_srtp;
    }
}

// dtls_srtp_exporter/metrics.go
var (
    // 握手维度
    HandshakeTotal = prometheus.NewCounterVec(prometheus.CounterOpts{
        Name: "dtls_handshake_total", Help: "Total DTLS handshakes"},
        []string{"version", "cipher_suite", "result", "resumption"}) // result: success/timeout/fail_verify/fail_cipher
    
    HandshakeLatency = prometheus.NewHistogramVec(prometheus.HistogramOpts{
        Name: "dtls_handshake_latency_seconds", Buckets: []float64{.01, .05, .1, .2, .5, 1, 2}},
        []string{"version", "cipher_suite"})
    
    // 记录层维度
    RecordEncryptLatency = prometheus.NewHistogramVec(prometheus.HistogramOpts{
        Name: "dtls_record_encrypt_latency_seconds", Buckets: []float64{.0001, .0005, .001, .005, .01}},
        []string{"cipher", "direction"}) // direction: enc/dec
    
    RecordDecryptErrors = prometheus.NewCounterVec(prometheus.CounterOpts{
        Name: "dtls_record_decrypt_errors_total", Help: "AEAD tag verify failed"},
        []string{"error_type"}) // error_type: tag_mismatch/replay/seq_overflow
    
    // 密钥管理维度
    KeyRotationTotal = prometheus.NewCounterVec(prometheus.CounterOpts{
        Name: "dtls_key_rotation_total", Help: "Key update / rekey events"},
        []string{"trigger"}) // trigger: timer/bytes_limit/peer_request
    
    // 硬件加速维度
    HWAccelOffloadRatio = prometheus.NewGaugeVec(prometheus.GaugeOpts{
        Name: "dtls_hw_offload_ratio", Help: "Percentage of crypto ops offloaded to HW"},
        []string{"algorithm", "device"}) // algorithm: SM2/SM3/SM4, device: hisi_qm/hygon_zip
)

// SRTP 发送回调中注入 Trace ID
int srtp_send_hook(void *ctx, uint8_t *pkt, int len) {
    otel_span_t *span = otel_get_active_span(ctx);
    if (span) {
        uint16_t trace_id = otel_span_get_trace_id(span);
        // 写入 SRTP Header Extension (ID=0xBEDE, 定义私有)
        srtp_add_header_extension(pkt, 0xBEDE, &trace_id, 2);
    }
    return sendto(fd, pkt, len, 0, ...);
}

# srt_gateway_config.yaml
dtls_srtp:
  profile: "SRTP_SM4_GCM_SM3"          # 强制国密 GCM，抗弱网丢包无误差扩散
  mtu: 1316                            # 适配 MPEG-TS over UDP (188*7)
  srt:
    latency: 120                       # ms, 编解码缓冲 + 网络抖动
    peerlatency: 120
    pbkeylen: 16                       # SM4 128-bit
    passphrase: "{{ vault:srt_passphrase }}" # 运行时注入，不落盘
  congestion: "live"                   # SRT Live 模式，优先低延迟
  fec: false                           # 依赖 DTLS 重传 + 应用层 FEC (RaptorQ)
  
compliance:
  key_rotation_hours: 6                # 高价值内容，密钥轮换激进
  audit_log_level: "FULL"              # 记录每帧加密参数，满足广电总局审计

# mcptt_gateway_config.yaml
dtls_srtp:
  profile: "SRTP_SM4_CCM_SM3"          # CCM 模式确定性延迟，适配实时语音
  srtp_auth_tag_len: 8                 # 64-bit 认证标签，省带宽
  dtls:
    mtu: 1200                          # 专网窄带 MTU
    cookie_verify: true                # 防洪泛
    hello_verify_request: true
  key_mgmt:
    mki_enabled: true                  # Master Key Identifier 必开，支持多密钥平滑切换
    mki_length: 2
    
reliability:
  redundancy: "1+1热备"                # 双网关 VRRP 漂移，会话状态同步 (SM4-GCM 加密同步通道)
  failover_time_ms: < 50               # 业务无感切换

# industrial_gateway_config.yaml
dtls_srtp:
  profile: "SRTP_SM4_GCM_SM3"
  hw_offload: mandatory                # 必须走 FPGA/ASIC 线速加密，抖动 < 1us
  qos:
    dscp: 46 (EF)                      # 最高优先级
    vlan_pcp: 7
  anti_replay:
    window_size: 64                    # 小窗口，低延迟
    strict_order: true                 # 乱序直接丢弃，由上层协议重传
    
security:
  device_identity: "X.509 SM2 + TPM 2.0" # 设备端硬件根信任
  attestation: "Remote Attestation (TCG)" # 启动度量上报

# Dockerfile.reproducible
FROM --platform=linux/arm64 ubuntu:22.04@sha256:xxxxxxxx AS builder
# 固定构建时间、用户、路径
ARG SOURCE_DATE_EPOCH=1714567200
ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update && apt-get install -y --no-install-recommends 
    gcc-12=12.3.0-1ubuntu1~22.04 
    make=4.3-4.1ubuntu1 
    # ... 固定所有包版本
# 编译产出
# 最终镜像
FROM scratch
COPY --from=builder /out/srtp_gateway /srtp_gateway
ENTRYPOINT ["/srtp_gateway"]

# 1. 抓包解密 (需导出 Master Key)
# 客户端/服务端启动环境变量
export SSLKEYLOGFILE=/tmp/sslkeys.log
# Wireshark: Preferences -> Protocols -> TLS -> (Pre-)Master-Secret log filename

# 2. 验证国密套件协商
openssl s_client -dtls1_2 -connect 192.168.1.100:443 
    -cipher 'ECDHE_SM2_SM4_GCM_SM3' -curves sm2p256v1 
    -msg -debug -state -CAfile ca.crt

# 3. 离线证书链校验 (SM2)
openssl verify -verbose -CAfile ca.crt -untrusted intermediate.crt server.crt
# 输出: server.crt: OK

# 4. SM2 密钥对生成与自签 (测试用)
gmssl genpkey -algorithm SM2 -out sm2_key.pem
gmssl req -new -key sm2_key.pem -out sm2_csr.pem -sm3
gmssl x509 -req -in sm2_csr.pem -signkey sm2_key.pem -out sm2_crt.pem -days 365 -sm3

# 5. 性能基线测试 (单核)
taskset -c 0 openssl speed -evp sm4-gcm -elapsed
taskset -c 0 openssl speed -evp sm3 -elapsed
taskset -c 0 openssl speed sm2 -elapsed

# 6. 硬件加速引擎状态检查
# 海思 QM
cat /proc/hisi_qm/version
ls /dev/hisi_qm* 
# 海光 ZIP
dmesg | grep -i zip
ls /dev/zip*

# 7. 内存泄漏/侧信道检测
valgrind --tool=memcheck --leak-check=full ./srtp_gateway
# 常量时间检测
ctgrind --tool=ctgrind ./srtp_gateway

# 8. 密评现场取证打包
tar -czf audit_evidence_$(date +%Y%m%d).tar.gz 
    /etc/srtp_gateway/config.yaml 
    /var/log/srtp_gateway/audit.log 
    /opt/certs/ 
    /usr/local/ssl/openssl.cnf 
    $(which openssl) $(ldd $(which openssl) | awk '{print $3}')