 JackDoan
|
eff67f1159
Size the buffer of a hybrid confirmation for an empty reply, not the mtu
|
5 өдөр өмнө |
|
JackDoan
|
a3dc54b012
Keep a hybrid responder's reassembled msg1 rather than a copy of it
|
5 өдөр өмнө |
|
JackDoan
|
e8d6cd9b58
Size the buffers of a handshake packet sent through a relay for the packet, not the mtu
|
5 өдөр өмнө |
|
JackDoan
|
d190ac7446
handshake/fragment: Back every packet of an attempt with one allocation
|
5 өдөр өмнө |
|
JackDoan
|
05410034e3
handshake/fec: Encode a message from its own bytes, copying only a padded last symbol
|
5 өдөр өмнө |
|
JackDoan
|
cbcf441d7c
Decode a fragmented handshake message straight into its packet, behind room for the Nebula header, instead of copying it there
|
5 өдөр өмнө |
|
JackDoan
|
4b295e086e
handshake: Take the peer's static key from noise once per certificate check
|
5 өдөр өмнө |
|
JackDoan
|
35b3d92bdd
handshake: Let a payload's certificate alias the decrypted message rather than copying it
|
5 өдөр өмнө |
|
JackDoan
|
7c2dcd7ba1
handshake: Marshal a payload in one pass, straight into out
|
5 өдөр өмнө |
|
JackDoan
|
4d42378537
handshake: Keep the ephemeral ML-KEM-1024 key a handshake generates expanded, instead of expanding it again from its seed for msg2
|
5 өдөр өмнө |
|
JackDoan
|
cb9ab9c516
handshake: Keep the static ML-KEM-1024 key expanded in the Credential, instead of expanding it from its seed in every handshake
|
5 өдөр өмнө |
|
JackDoan
|
6c6bf5e486
cert: Check an ML-KEM-1024 public key with the FIPS 203 modulus check alone, without expanding it
|
5 өдөр өмнө |
|
JackDoan
|
d102107f2e
e2e: A hybrid tunnel whose msg2 completed by the relay promotes to direct
|
5 өдөр өмнө |
|
JackDoan
|
b92806d199
Record accepting per-path msg2 resends to replayed msg1s
|
5 өдөр өмнө |
|
JackDoan
|
437d47ffc5
Send by the relay when hybrid msg3 came by one, the direct address learned from msg1 may only work toward us
|
5 өдөр өмнө |
|
JackDoan
|
bd82089a3f
Clock cached msg2 resends per path in the fragment table, so a copy of msg1 arriving by a relay or a second address is answered even when the direct path only works one way
|
5 өдөр өмнө |
|
JackDoan
|
1d0281cba5
Document post-quantum handshakes as hybrid only, and the crossing window
|
5 өдөр өмнө |
|
JackDoan
|
dff5c51dd6
Make post-quantum handshakes hybrid only: drop ix_psk2_mlkem1024, need a v3 certificate, and leave a classical msg1 crossing a hybrid one unanswered
|
5 өдөр өмнө |
|
JackDoan
|
656164b259
cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM
|
5 өдөр өмнө |
|
JackDoan
|
84e28c62ea
Reassemble msg2 in a slot per responder FragID, so two hosts answering one msg1 do not wipe each other out
|
5 өдөр өмнө |
|
JackDoan
|
6885bac85d
Record the hybrid field test and the crossing-attempt race in open items
|
5 өдөр өмнө |
|
JackDoan
|
5c5d6e3314
Fold the 2026-10-14 crypto review into the spec: deterministic signing, which fingerprint to block, the skem oracle, the psk2 static key, pending responders, the sticky default and the fork's rollback gap
|
5 өдөр өмнө |
|
JackDoan
|
0aa15ef247
nebula-cert: Lead print output for a version 3 certificate with both fingerprints, and say the v2 one blocks both forms
|
5 өдөр өмнө |
|
JackDoan
|
2ecf2f738e
cert: Sign version 3 certificates with deterministic ML-DSA-87, so extending a certificate twice gives the same certificate
|
5 өдөр өмнө |
|
JackDoan
|
1bf0bf382c
Send hybrid msg3 without a repair delay, so the packets cached behind it do not reach the responder before it completes
|
6 өдөр өмнө |
|
JackDoan
|
19578b3b6b
Document remembering answered msg1s and crossing attempts
|
6 өдөр өмнө |
|
JackDoan
|
5edcaefa33
e2e: Back to back hybrid handshakes, and a classical attempt crossing a hybrid one
|
6 өдөр өмнө |
|
JackDoan
|
bbade4dc9a
Take a hybrid tunnel on msg3 even over a newer one, the initiator has committed to it
|
6 өдөр өмнө |
|
JackDoan
|
cbf8146bda
udp: Buffer a fragmented handshake burst in the tester, so crossing bursts cannot deadlock the e2e router
|
6 өдөр өмнө |
|
JackDoan
|
3b850c6ecf
handshake/fragment: Remember answered messages, so repair fragments trailing a completed msg1 do not eat the source quota
|
6 өдөр өмнө |
