mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 08:14:42 +00:00
Johnathan Corgan
999144f59a
FIPS_OVERHEAD was 150 but had two bugs: the session AEAD tag (16 bytes) was listed in the comment but missing from the arithmetic, and the coordinate budget (~60 bytes) was undersized and didn't belong in a constant representing fixed data path overhead. Corrected to 106 bytes (the actual fixed overhead without coordinates). This increases effective_ipv6_mtu from 1322 to 1366 for standard Ethernet, well above the IPv6 minimum of 1280. Added a guard in send_session_data() that computes the total wire size with coordinates before committing to include them. If adding coords would exceed the transport MTU, the CP flag is skipped and the warmup counter is not decremented. This prevents silently producing oversized packets at tree depth 2+. Updated design docs (ipv6-adapter, wire-formats, mesh-operation) with corrected overhead values.
53 lines
1.9 KiB
Rust
53 lines
1.9 KiB
Rust
//! FIPS Protocol Messages
|
|
//!
|
|
//! Wire format definitions for FIPS protocol communication across two layers:
|
|
//!
|
|
//! ## Link Layer (peer-to-peer, hop-by-hop)
|
|
//!
|
|
//! Messages exchanged between directly connected peers over Noise-encrypted
|
|
//! links. Includes spanning tree gossip, bloom filter propagation, discovery
|
|
//! protocol, and forwarding of session-layer datagrams.
|
|
//!
|
|
//! Link-layer peer authentication uses Noise IK (see `noise.rs`), which
|
|
//! establishes the encrypted channel before any of these messages are sent.
|
|
//!
|
|
//! ## Session Layer (end-to-end, between FIPS addresses)
|
|
//!
|
|
//! Messages exchanged between source and destination FIPS nodes, encrypted
|
|
//! with session keys that intermediate nodes cannot read. Includes session
|
|
//! establishment, IPv6 datagram encapsulation, and routing errors.
|
|
//!
|
|
//! Session-layer datagrams are carried as opaque payloads through the link
|
|
//! layer, encrypted end-to-end independently of per-hop link encryption.
|
|
|
|
mod discovery;
|
|
mod error;
|
|
mod filter;
|
|
mod link;
|
|
mod session;
|
|
mod tree;
|
|
|
|
// Re-export all public types at protocol:: level
|
|
pub use error::ProtocolError;
|
|
pub use link::{
|
|
Disconnect, DisconnectReason, HandshakeMessageType, LinkMessageType, SessionDatagram,
|
|
SESSION_DATAGRAM_HEADER_SIZE,
|
|
};
|
|
pub use tree::TreeAnnounce;
|
|
pub use filter::FilterAnnounce;
|
|
pub use discovery::{LookupRequest, LookupResponse};
|
|
pub use session::{
|
|
CoordsRequired, FspFlags, FspInnerFlags, PathBroken, PathMtuNotification, SessionAck,
|
|
SessionFlags, SessionMessageType, SessionReceiverReport, SessionSenderReport, SessionSetup,
|
|
COORDS_REQUIRED_SIZE, PATH_MTU_NOTIFICATION_SIZE, SESSION_RECEIVER_REPORT_SIZE,
|
|
SESSION_SENDER_REPORT_SIZE,
|
|
};
|
|
pub(crate) use session::{coords_wire_size, decode_optional_coords, encode_coords};
|
|
|
|
/// Protocol version for message compatibility.
|
|
pub const PROTOCOL_VERSION: u8 = 1;
|
|
|
|
// Legacy type alias re-export
|
|
#[allow(deprecated)]
|
|
pub use link::MessageType;
|