riccardom dee68facfd [management] Pin the property that makes per-peer nonce state unnecessary ...

A nonce carries the window it was minted in, not the instant, and is accepted
for that window and the one before it. So a peer re-stamped at least once per
window can never be left holding one outside the accepted pair, whenever it was
last served and however much life its own nonce had left. That is the whole
reason management tracks nothing per peer, and it was resting on an argument
rather than a test.

The phases are part of the property, not decoration: accounts are deliberately
given a refresh phase of their own, so the guarantee has to hold off the window
boundary too. The negative case shows why that matters — a cadence of exactly
two windows lands inside the grace window when it is aligned to the boundary and
leaves a gap when it is not.

2026-10-02 16:21:04 +02:00

..

certtest

implement certificate posture check

2026-08-31 13:47:55 +02:00

certposture_test.go

start TPM support

2026-09-16 23:00:44 +02:00

chain.go

Find a chain to each challenge's CAs through every intermediate the store holds

2026-10-01 10:06:50 +02:00

challenge_test.go

[management] Pin the property that makes per-peer nonce state unnecessary

2026-10-02 16:21:04 +02:00

challenge.go

[management] Make the certificate challenge window one knob to turn

2026-10-02 16:21:04 +02:00

proof.go

start TPM support

2026-09-16 23:00:44 +02:00