riccardom 50a0bfcaaf [client] pqkem: signal an offer-build failure with a marker, not an empty offer ...

The error-vs-"no KEM" ambiguity fixed on the answer path also existed on the
offer path: when SignalOffer failed to build the bootstrap offer (e.g. an entropy
failure in startExchangeLocked), OfferPayload logged it and still sent an empty
MlkemPayload. The responder read that as "peer does not run the KEM", marked the
initiator non-capable, and answered empty — which made the initiator mark the
responder non-capable too, disabling the KEM for the session over one transient
error.

Return the MsgError marker from SignalOffer on failure, and have the responder's
SignalOnOffer answer a received marker with its own marker rather than an empty
answer. A genuinely non-KEM peer still sends no payload at all, so the empty
capability signal is unchanged.

Found in cubic review on #7098 (client/internal/pqkem_adapter.go:130).

2026-10-09 09:53:00 +02:00

..

bench_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

callbacks.go

[client] pqkem: carry a generation on PSK callbacks to drop stale applies

2026-10-07 13:30:52 +02:00

capability_test.go

[client] pqkem: fix the capability-signal wording in a test comment

2026-10-09 09:51:05 +02:00

concurrency_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

convergence_test.go

[client] pqkem: enforce exchange roles and re-bootstrap stale signal offers

2026-09-11 15:03:47 +02:00

convergence.go

[client] pqkem: drop the unused exchangeCtl.pendingPSK field

2026-10-09 09:49:59 +02:00

env.go

[client] pqkem: preserve group scope in the slog-to-logrus handler

2026-10-09 09:51:41 +02:00

kem_framing_test.go

Adds test to validate compromised keys are not accepted

2026-09-11 14:48:54 +02:00

kem_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

kem.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

manager_test.go

[client] pqkem: carry a generation on PSK callbacks to drop stale applies

2026-10-07 13:30:52 +02:00

manager.go

[client] pqkem: signal an offer-build failure with a marker, not an empty offer

2026-10-09 09:53:00 +02:00

message_test.go

[client] pqkem: signal a responder failure distinctly from "no KEM"

2026-10-07 13:38:42 +02:00

message.go

[client] pqkem: mention *ErrorMsg in the Decode doc comment

2026-10-09 09:50:09 +02:00