mirror of https://github.com/jmcorgan/fips.git synced 2026-08-09 08:14:42 +00:00

T

Johnathan Corgan 9a6fa07e77 Session 46: Noise IK peer authentication implementation

Implement Noise Protocol Framework for peer authentication using the IK
pattern, which allows responders to learn initiator identity from the
encrypted handshake message.

Protocol: Noise_IK_secp256k1_ChaChaPoly_SHA256
- Message 1: 82 bytes (ephemeral + encrypted static)
- Message 2: 33 bytes (ephemeral only)

New noise.rs module (~600 lines):
- HandshakeState: Manages handshake for both initiator/responder roles
- NoiseSession: Post-handshake symmetric encryption
- CipherState: ChaCha20-Poly1305 with nonce counter
- SymmetricState: HKDF-SHA256 key derivation

PeerConnection integration:
- Simplified HandshakeState enum (Initial/SentMsg1/ReceivedMsg1/Complete/Failed)
- start_handshake(): Initiator generates msg1
- receive_handshake_init(): Responder processes msg1, discovers identity
- complete_handshake(): Initiator completes with msg2
- take_session(): Extract NoiseSession for ActivePeer

Identity helpers:
- Identity::keypair() for Noise operations
- PeerIdentity::from_pubkey_full() preserves parity for ECDH
- PeerIdentity::pubkey_full() returns full key or derives with even parity

Node changes:
- initiate_peer_connection() now starts handshake and sends msg1
- Method is async to use transport's async send

All 219 tests pass.

2026-02-01 01:28:01 +00:00

docs

Session 43: CLI config option and state machine design

2026-01-31 23:33:02 +00:00

src

Session 46: Noise IK peer authentication implementation

2026-02-01 01:28:01 +00:00

.gitignore

Add identity module with NodeId, FipsAddress, and auth challenge

2026-01-24 23:57:48 +00:00

Cargo.lock

Session 46: Noise IK peer authentication implementation