mirror of https://github.com/ospab/ostp.git
ospab
2660a37249
Brings the crypto security audit into alpha alongside the already-merged
reconnection/UoT/Flutter fixes:
- CRITICAL: transport keys now come from Noise Split() over ck (DH-
inclusive), not the handshake hash — restores forward secrecy.
Wire-breaking, PROTOCOL_VERSION 4->5.
- Rate-limit + cache the O(N_keys) handshake trial path (CPU DoS).
- Quiet hot-path logging; access keys no longer logged verbatim.
- Removed dead 0-RTT resumption module (unsafe XOR ticket crypto).
- Karn's algorithm RTT fix, 32-bit frame-length overflow guard,
replay-cache eviction instead of global reject.
- Updated EN/RU specification docs to match.
No conflicts: protocol-hardening's bridge.rs commit was an independent
duplicate of the same reconnection fix already on alpha, so git merged it
as a no-op on that file.
|
||
|---|---|---|
| .. | ||
| transport | ||
| api.rs | ||
| dispatcher.rs | ||
| dns.rs | ||
| fallback.rs | ||
| lib.rs | ||
| outbound.rs | ||
| relay.rs | ||
| relay_node.rs | ||
| router.rs | ||
| signal.rs | ||
| tui.rs | ||