mirror of https://github.com/jmcorgan/fips.git synced 2026-07-30 19:46:15 +00:00

T

Johnathan Corgan f920526ece Add epoch-based peer restart detection to Noise IK handshake

Each node generates a random 8-byte startup epoch, encrypted inside
both Noise IK handshake messages (msg1 and msg2). When a peer's msg1
arrives with a different epoch than the stored value, the node tears
down the stale session and processes the msg1 as a new connection,
enabling near-instant restart detection instead of the 30-second
dead timeout.

Wire format impact:
- msg1: 82 -> 106 bytes (added 24-byte encrypted epoch after ss DH)
- msg2: 33 -> 57 bytes (added 24-byte encrypted epoch after se DH)
- Wire msg1: 90 -> 114 bytes, wire msg2: 45 -> 69 bytes

2026-02-22 20:50:50 +00:00

benches

Bloom module test coverage, benchmarks, and design doc corrections

2026-02-15 16:05:59 +00:00

docs

Expand fips-intro.md: prior work, MMP section, review fixes

2026-02-22 16:15:04 +00:00

src

Add epoch-based peer restart detection to Noise IK handshake

2026-02-22 20:50:50 +00:00

testing

Update design docs for heartbeat, auto-reconnect, handshake retry, and sim improvements