mirror of
https://github.com/jmcorgan/fips.git
synced 2026-07-30 19:46:15 +00:00
Design 3-message peer auth handshake (AuthInit → AuthChallenge → AuthComplete): - Deterministic crossing connection handling via npub ordering - Domain-separated signatures (fips-peer-auth-v1) - New message types: 0x09 AuthInit, 0x0a AuthChallenge, 0x0b AuthComplete fips-design.md: - Replace 4-message auth with 3-message design - Add crossing connection handling rules - Add message structures and signature construction fips-architecture.md: - Expand peer lifecycle state machine with auth states - Add Node Startup Sequence section - Add Static Peer Retry Policy (exponential backoff, jitter) - Add Inbound Connection Acceptance section - Update peer config for static-only initial impl fips-protocol-flow.md: - Add §7 Peer Connection Establishment - Add §7.2 Post-Authentication flow Design decisions: static peers only, always do peer auth regardless of transport, accept all authenticated inbound connections.
FIPS Design Documents
Protocol design specifications and analysis for the Federated Interoperable Peering System.
Protocol Design
| Document | Description |
|---|---|
| fips-design.md | Core protocol specification: goals, architecture, identity, addressing, spanning tree |
| fips-routing.md | Routing architecture: Bloom filters, discovery protocol, session establishment |
| fips-transports.md | Transport protocol characteristics: UDP, Ethernet, Tor, radio, and other link types |
| spanning-tree-dynamics.md | Detailed study of spanning tree gossip protocol behavior and convergence |
Implementation
| Document | Description |
|---|---|
| fips-architecture.md | Software architecture: entities, state machines, transport abstractions, configuration |
| fips-architecture-review.md | Architecture review issues and resolution status |
| fips-tun-driver.md | TUN interface driver: reader/writer threads, ICMPv6, packet flow |