riccardom 1870b104ba [client] pqkem: make signalling bootstrap idempotent through awaitingRekey ...

The controller sends its KEM offer both on its own guard event and in reply
to the responder's offer. SignalOffer was idempotent only while awaiting the
answer; once the answer arrived (awaitingRekey) a repeat call started a fresh
exchange with a different PSK, desyncing the two peers (one on the old PSK,
one on the new) so WireGuard derived misaligned transport keys and dropped all
data. Treat awaitingRekey as in-flight too and return the same offer.

2026-09-11 14:48:54 +02:00

..

bench_test.go

Bench key material boilerplate time/allocs

2026-09-11 14:48:54 +02:00

callbacks.go

Revert "Introduces a forced WG handshake on initial MLKEM bootstrap."

2026-09-11 14:48:54 +02:00

capability_test.go

Anticipates PSK before WG does handshake so it finds it to set it

2026-09-11 14:48:54 +02:00

concurrency_test.go

pqkem: concurrency tests (recovery + race)

2026-09-11 14:48:54 +02:00

convergence_test.go

Don't rotate PQ keys if data path is idle for ~90s (less than a WG handhshake time

2026-09-11 14:48:54 +02:00

convergence.go

Revert "Introduces a forced WG handshake on initial MLKEM bootstrap."

2026-09-11 14:48:54 +02:00

env.go

pqkem: strict (fail-closed) mode + wire status Quantum resistance

2026-09-11 14:48:54 +02:00

kem_framing_test.go

Adds test to validate compromised keys are not accepted

2026-09-11 14:48:54 +02:00

kem_test.go

Epurate wg refs

2026-09-11 14:48:54 +02:00

kem.go

pqkem: derive PSK with HKDF-SHA256

2026-09-11 14:48:54 +02:00

manager_test.go

Revert "Introduces a forced WG handshake on initial MLKEM bootstrap."

2026-09-11 14:48:54 +02:00

manager.go

[client] pqkem: make signalling bootstrap idempotent through awaitingRekey

2026-09-11 14:48:54 +02:00

message_test.go

Removes confirm. Uses next offer to deliver confirmation/ack of previous round

2026-09-11 14:48:54 +02:00

message.go

Removes confirm. Uses next offer to deliver confirmation/ack of previous round

2026-09-11 14:48:54 +02:00