20 Commits

Include renames

Author	SHA1	Message	Date
JackDoan	35b3d92bdd	handshake: Let a payload's certificate alias the decrypted message rather than copying it	2026-10-15 10:42:20 -05:00
JackDoan	7c2dcd7ba1	handshake: Marshal a payload in one pass, straight into out	2026-10-15 10:42:10 -05:00
JackDoan	4d42378537	handshake: Keep the ephemeral ML-KEM-1024 key a handshake generates expanded, instead of expanding it again from its seed for msg2	2026-10-15 10:42:01 -05:00
JackDoan	cb9ab9c516	handshake: Keep the static ML-KEM-1024 key expanded in the Credential, instead of expanding it from its seed in every handshake	2026-10-15 10:41:51 -05:00
JackDoan	bd82089a3f	Clock cached msg2 resends per path in the fragment table, so a copy of msg1 arriving by a relay or a second address is answered even when the direct path only works one way	2026-10-14 15:17:24 -05:00
JackDoan	dff5c51dd6	Make post-quantum handshakes hybrid only: drop ix_psk2_mlkem1024, need a v3 certificate, and leave a classical msg1 crossing a hybrid one unanswered	2026-10-14 14:58:29 -05:00
JackDoan	656164b259	cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM	2026-10-14 14:40:52 -05:00
JackDoan	84e28c62ea	Reassemble msg2 in a slot per responder FragID, so two hosts answering one msg1 do not wipe each other out	2026-10-14 14:35:45 -05:00
JackDoan	3b850c6ecf	handshake/fragment: Remember answered messages, so repair fragments trailing a completed msg1 do not eat the source quota	2026-10-14 12:56:12 -05:00
JackDoan	5cc53c22db	Document the classical-only responder e in hybrid IX, msg2 is now 9 fragments	2026-10-14 12:27:56 -05:00
JackDoan	b26c1e9c3e	Run hybrid handshakes: v3 holders initiate them, responders wait for msg3, initiators resend it until confirmed	2026-10-14 11:03:04 -05:00
JackDoan	ab89556c5c	handshake: Add ix_hybrid_mlkem1024, DefinedNet/noise hybrid IX with ML-KEM-1024 over version 3 certificates	2026-10-14 10:50:33 -05:00
JackDoan	73ddb56c34	Build with Go 1.27 and DefinedNet/noise, for crypto/mldsa and hybrid Noise patterns	2026-10-14 10:41:11 -05:00
JackDoan	45e449a591	handshake/fragment: Carry an optional cookie, with room for it reserved in every fragment	2026-10-13 22:50:28 -05:00
JackDoan	2e5adfddc6	handshake: Add ix_psk2_mlkem1024, IX with an ephemeral ML-KEM-1024 exchange in the psk2 slot	2026-10-13 22:42:06 -05:00
JackDoan	31f3d6435e	handshake/fragment: Carry oversized handshake messages as FEC coded fragments	2026-10-13 22:42:06 -05:00
JackDoan	8f9a631f6e	handshake/fec: Systematic Cauchy Reed-Solomon erasure code over GF(2^8)	2026-10-13 22:42:06 -05:00
Jack Doan	a690c904ba	improve rejection of malformed handshakes (#1756)	2026-06-10 09:28:07 -05:00
Nate Brown	5f920fdd7d	Remove the global noiseEndianness var (#1707)	2026-05-06 17:37:03 -05:00
Nate Brown	9ec8cf10f3	Handshake state machine (#1656)	2026-04-30 21:30:27 -05:00