Johnathan Corgan 2293f7d2d5 Replace Noise IK with Noise XK at the FSP session layer ...

The session-layer handshake now uses the 3-message XK pattern instead
of the 2-message IK pattern, providing stronger initiator identity
hiding. The initiator static key is deferred to msg3 and encrypted
under the es+ee DH chain, so eavesdroppers cannot identify the
initiator from the handshake.

XK pattern: -> e, es (msg1) / <- e, ee + epoch (msg2) / -> s, se + epoch (msg3)

Key changes:
- Add XK handshake methods alongside existing IK methods in noise module
- Add SessionMsg3 wire format and FSP_PHASE_MSG3 (0x03) prefix
- Replace Responding state with AwaitingMsg3 in session state machine
- Rewrite session handlers: handle_session_setup defers identity to msg3,
  handle_session_ack processes msg2 and sends msg3, new handle_session_msg3
  completes the responder handshake and registers identity
- Link-layer (FMP) continues to use Noise IK unchanged
- Add comprehensive XK unit tests and update all integration tests

2026-02-22 22:05:23 +00:00

..

discovery.rs

Add MTU fields to lookup packets for path MTU discovery

2026-02-22 21:52:08 +00:00

error.rs

Split protocol.rs into protocol/ directory, standardize imports, clean lib.rs

2026-02-11 05:02:02 +00:00

filter.rs

Split protocol.rs into protocol/ directory, standardize imports, clean lib.rs

2026-02-11 05:02:02 +00:00

link.rs

Add link-layer heartbeat and liveness timeout for dead peer detection

2026-02-19 20:53:51 +00:00

mod.rs

Replace Noise IK with Noise XK at the FSP session layer

2026-02-22 22:05:23 +00:00

session.rs

Replace Noise IK with Noise XK at the FSP session layer

2026-02-22 22:05:23 +00:00

tree.rs

Split protocol.rs into protocol/ directory, standardize imports, clean lib.rs

2026-02-11 05:02:02 +00:00