mirror of
https://github.com/jmcorgan/fips.git
synced 2026-10-05 19:18:25 +00:00
Johnathan Corgan
d13cbbf91f
Before the responder stopped cutting over on its own tick, a link rekey whose msg2 was lost left the responder on the new session with its age reset. The initiator's resent msg1 then fell under the 30 s floor below which a msg1 counts as a duplicate of the startup one, and the responder answered it with the msg2 it stored at startup, addressed to an index the initiator no longer dispatches. Each resend met the same answer and the rekey stalled until a fresh handshake replaced the link. The new test drops the rekey msg2, runs the responder's rekey tick, delivers the initiator's first msg1 resend, and checks that the responder neither cut over nor replied with a msg2 addressed anywhere but the rekey. A reply addressed to the rekey is admitted, so a responder that resends the msg2 it answered the rekey with still passes.