mirror of https://github.com/ospab/ostp.git
ospab
4ac2e79e14
Reflect the crypto hardening in the EN/RU specification:
- Section 6: transport keys now come from Noise Split() over the chaining
key ck (includes the ee DH secret), giving forward secrecy; added the
rationale for why keys must NOT come from the handshake hash h, and the
wire-version-5 gate.
- Section 8: documented the handshake-trial CPU-DoS defense (per-key
secret/marker caching + trial-path token bucket).
- Corrected the handshake replay window (±300s / 5min, was mis-stated as
±30s) and PSK derivation (HKDF-SHA256).
|
||
|---|---|---|
| .. | ||
| architecture.md | ||
| client.md | ||
| integrations.md | ||
| obfuscation.md | ||
| server.md | ||
| specification.md | ||