ospab 5754689e09 refactor: remove dead 0-RTT resumption module (unsafe XOR ticket crypto) ... The resumption module (SessionTicket/TicketValidator) was never wired into the client or server — nothing issued or validated tickets, and no Resume frame was ever sent. But it "encrypted" tickets by XOR-ing them with a single static keystream SHA256(psk || const) and had no MAC (despite a doc comment claiming HMAC): a textbook many-time-pad, trivially broken from a couple of captured tickets, and malleable. Leaving it in-tree invited someone to wire up a broken 0-RTT path later. Removed the module, its FrameKind::Resume wire variant, and the protocol handler for it. 0-RTT can be reintroduced later on a real AEAD-sealed ticket if desired.		2026-07-11 21:22:45 +03:00
..
src	refactor: remove dead 0-RTT resumption module (unsafe XOR ticket crypto)	2026-07-11 21:22:45 +03:00
Cargo.toml	feat: implement custom Reality protocol with ChaCha20Poly1305 and X25519	2026-05-29 15:00:17 +03:00