Commit Graph
15 Commits
Author SHA1 Message Date
riccardom 6f6fdfff4d Leave signal offer/answer as a pull/push operation not as an actual transport 2026-08-27 12:18:07 +02:00
riccardom 65948ca76d Assume two transports: initial "signal" (control plane) one (no data path established yet) + data path one
Define OnDataPathRekeyed event to transition from control plane path to data plane path over the WG tunnel.

Keep confirm ALWAYS on NEW established WG tunnel (posthandshake with rekeying). We keep an active method
irrelevant of the WG handshake (we might decide that the indirect wg handshake is sufficient in the future).

Optimistic commit on responder(when sending answer), while on initiator we set it on getting the answer
2026-08-27 12:18:07 +02:00
riccardom da6a56a7ef Epurate wg refs 2026-08-27 12:18:07 +02:00
riccardom 4582c5b4fc Collapse Driver and Manager in one.
- Have just one manager => one lock
 - Session state is needed in driver to => we have it available now.
 - Isomorphically align to rosenpass components and functionality

File	Role	                                  rosenpass equivalent
kem.go	primitive pure X25519MLKEM768	          crypto.go/handshake
message.go	Offer/Answer/Confirm + Encode/Decode  messages.go
manager.go	Manager stateful, single lock	      server logic
callbacks.go	WGCallbackHandler (seam output)	  Handler
Transport (interfaccia)	seam trasporto pluggable  Conn
2026-08-27 12:18:07 +02:00
riccardom 5eea1b1c8e [squash] isInitial and answered can be inferred without state variables 2026-08-27 12:18:07 +02:00
riccardom b92f7c54d0 Manages convergence 2026-08-27 12:18:07 +02:00
riccardom 0cf67417f9 Models reattempts 2026-08-27 12:18:07 +02:00
riccardom f66b94be07 Reuse answer, don't calculate again 2026-08-27 12:18:07 +02:00
riccardom 7cb08f7282 Adds driver to glue together manager and outside world 2026-08-27 12:18:07 +02:00
riccardom 33734635bf Defines event callbacks 2026-08-27 12:18:07 +02:00
riccardom 1d7acada1c Admits possible errors on Encode 2026-08-27 12:18:07 +02:00
riccardom bfcc8aaa94 Bench key material boilerplate time/allocs
CGO_ENABLED=1 go test ./client/internal/pqkem/ -run '^$' -bench . -benchmem 2>&1 | grep -E "Benchmark|ns/op|PASS|ok" | head -20

BenchmarkX25519Keygen-14    	   33795	     34966 ns/op	     224 B/op	       5 allocs/op
BenchmarkX25519ECDH-14      	   33855	     33973 ns/op	      32 B/op	       1 allocs/op
BenchmarkMLKEMKeygen-14     	   21817	     67778 ns/op	    8200 B/op	       2 allocs/op
BenchmarkMLKEMEncaps-14     	   29918	     43235 ns/op	    1216 B/op	       2 allocs/op
BenchmarkMLKEMDecaps-14     	   26048	     56291 ns/op	      64 B/op	       2 allocs/op
PASS
ok  	github.com/netbirdio/netbird/client/internal/pqkem	9.751s
Shell cwd was reset to /home/riccardo/Desktop/Personal/netbirdio/netbird
2026-08-27 12:18:07 +02:00
riccardom 59a23d706a Pure mechanics of manager 2026-08-27 12:18:07 +02:00
riccardom 045678c184 Messages definition 2026-08-27 12:18:07 +02:00
riccardom cb9f8f75e6 ML-KEM encapsulate/decapsulate module 2026-08-27 12:18:07 +02:00