Origami74andJohnathan Corgan d3477a7c0f Add explicit counter to DataPacket for out-of-order decryption ...

Session-layer encryption used an implicit nonce counter with no counter
on the wire, requiring packets to arrive in exact order. Under bulk
transfer load (e.g., SCP), UDP packet loss or reordering permanently
desynchronized sender/receiver counters, causing all subsequent
decryption to fail with no recovery.

Add an 8-byte counter field to the DataPacket wire format and switch
from implicit-counter decrypt() to decrypt_with_replay_check() which
uses the explicit wire counter plus a 2048-packet sliding replay
window — the same pattern already used at the link layer.

Wire format: msg_type(1) + flags(1) + counter(8) + payload_len(2) = 12
bytes (was 4). FIPS_OVERHEAD updated 127 → 135 bytes accordingly.

2026-02-17 00:33:01 +00:00

..

bin

Session 64: Complete peer authentication handshake and wire RX loop

2026-02-10 17:40:13 +00:00

bloom

Bloom module test coverage, benchmarks, and design doc corrections

2026-02-15 16:05:59 +00:00

cache

Cache architecture: identity fix, cache merge, parent-change flush

2026-02-16 22:56:34 +00:00

config

Error recovery fixes and routing error rate limiting

2026-02-17 00:00:04 +00:00

identity

Module reorganization, identity test coverage, design doc corrections

2026-02-15 17:11:58 +00:00

node

Add explicit counter to DataPacket for out-of-order decryption

2026-02-17 00:33:01 +00:00

noise

Module reorganization and clippy cleanup

2026-02-15 15:07:42 +00:00

peer

Split cache.rs and config.rs into directory modules, create utils/

2026-02-15 17:56:32 +00:00

protocol

Add explicit counter to DataPacket for out-of-order decryption

2026-02-17 00:33:01 +00:00

transport

Session 48: Wire format design and logging improvements

2026-02-01 05:18:59 +00:00

tree

Module reorganization and clippy cleanup

2026-02-15 15:07:42 +00:00

upper

Add explicit counter to DataPacket for out-of-order decryption

2026-02-17 00:33:01 +00:00

utils

Split cache.rs and config.rs into directory modules, create utils/

2026-02-15 17:56:32 +00:00

lib.rs

Cache architecture: identity fix, cache merge, parent-change flush

2026-02-16 22:56:34 +00:00