riccardom 5341ab0a7b [client] pqkem: commit the initiator PSK only after Finish succeeds ...

processAnswer advanced the exchange to stateAwaitingRekey before init.Finish
derived the PSK. A rekey firing in that window chained the next offer off an
exchange whose key was not yet committed, letting the responder commit PSK N+1
before this side committed PSK N; a lost next answer then left the two peers on
different PSKs.

Move to an intermediate stateFinishing while deriving (OnDataPathRekeyed chains
only on stateAwaitingRekey, so it will not chain mid-derive), and advance to
stateAwaitingRekey only after Finish succeeds and the exchange is still current.

Found in cubic review on #7098 (client/internal/pqkem/convergence.go:194).

2026-10-07 13:25:03 +02:00

..

bench_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

callbacks.go

[client] pqkem: document rekey-failure recovery as host-defined

2026-10-07 13:23:34 +02:00

capability_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

concurrency_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

convergence_test.go

[client] pqkem: enforce exchange roles and re-bootstrap stale signal offers

2026-09-11 15:03:47 +02:00

convergence.go

[client] pqkem: commit the initiator PSK only after Finish succeeds

2026-10-07 13:25:03 +02:00

env.go

[client] pqkem: address review findings on convergence, strict parsing and status

2026-10-05 16:02:33 +02:00

kem_framing_test.go

Adds test to validate compromised keys are not accepted

2026-09-11 14:48:54 +02:00

kem_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

kem.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

manager_test.go

[client] pqkem: enforce exchange roles and re-bootstrap stale signal offers

2026-09-11 15:03:47 +02:00

manager.go

[client] pqkem: commit the initiator PSK only after Finish succeeds

2026-10-07 13:25:03 +02:00

message_test.go

Removes confirm. Uses next offer to deliver confirmation/ack of previous round

2026-09-11 14:48:54 +02:00

message.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00