Commit Graph
11 Commits
Author SHA1 Message Date
JackDoan cbcf441d7c Decode a fragmented handshake message straight into its packet, behind room for the Nebula header, instead of copying it there 2026-10-15 10:42:39 -05:00
JackDoan bd82089a3f Clock cached msg2 resends per path in the fragment table, so a copy of msg1 arriving by a relay or a second address is answered even when the direct path only works one way 2026-10-14 15:17:24 -05:00
JackDoan dff5c51dd6 Make post-quantum handshakes hybrid only: drop ix_psk2_mlkem1024, need a v3 certificate, and leave a classical msg1 crossing a hybrid one unanswered 2026-10-14 14:58:29 -05:00
JackDoan 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 2026-10-14 14:40:52 -05:00
JackDoan 84e28c62ea Reassemble msg2 in a slot per responder FragID, so two hosts answering one msg1 do not wipe each other out 2026-10-14 14:35:45 -05:00
JackDoan 1bf0bf382c Send hybrid msg3 without a repair delay, so the packets cached behind it do not reach the responder before it completes 2026-10-14 13:21:14 -05:00
JackDoan 3b850c6ecf handshake/fragment: Remember answered messages, so repair fragments trailing a completed msg1 do not eat the source quota 2026-10-14 12:56:12 -05:00
JackDoan b26c1e9c3e Run hybrid handshakes: v3 holders initiate them, responders wait for msg3, initiators resend it until confirmed 2026-10-14 11:03:04 -05:00
JackDoan 13658b74a0 Add handshakes.pq.require, and give new paths and responsive peers the PQ attempt 2026-10-14 10:18:00 -05:00
JackDoan 22cdb0739a Demand cookies for post-quantum msg1s while under load, and reload handshakes.pq settings 2026-10-13 22:50:28 -05:00
JackDoan a36ce25af4 Speak post-quantum handshakes over fragments, alternating with classical until one answers 2026-10-13 22:42:07 -05:00