riccardom a73ce11912 [client] pqkem: bind the configured pre-shared key into the PQ PSK ...

--pre-shared-key promises that only peers holding the same key can
communicate. With ML-KEM enabled the derived PQ PSK replaces it in
WireGuard, but the derivation never saw it: two peers with different
configured keys, or only one with a key, still agreed on the same PQ PSK
and talked. A permitted peer identity, or a stolen identity key, was enough
to bypass the extra secret (security review of #7098, finding F-001).
Rosenpass does not have this gap because it seeds its exchange with the
configured key.

Mix the configured key into the HKDF keying material, so a peer without it
derives a different PSK and WireGuard fails closed. It goes through the
binding shared by every derivation, so bootstrap and rotation both enforce
it. The library takes it as a generic option, keeping it free of WireGuard
concepts.

2026-10-19 16:37:25 +02:00

..

bench_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

callbacks.go

[client] pqkem: carry a generation on PSK callbacks to drop stale applies

2026-10-07 13:30:52 +02:00

capability_test.go

[client] pqkem: fix the capability-signal wording in a test comment

2026-10-09 09:51:05 +02:00

concurrency_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

convergence_test.go

[client] pqkem: enforce exchange roles and re-bootstrap stale signal offers

2026-09-11 15:03:47 +02:00

convergence.go

[client] pqkem: drop the unused exchangeCtl.pendingPSK field

2026-10-09 09:49:59 +02:00

env.go

[client] pqkem: preserve group scope in the slog-to-logrus handler

2026-10-09 09:51:41 +02:00

kem_framing_test.go

Adds test to validate compromised keys are not accepted

2026-09-11 14:48:54 +02:00

kem_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

kem.go

[client] pqkem: bind the configured pre-shared key into the PQ PSK

2026-10-19 16:37:25 +02:00

manager_test.go

[client] pqkem: carry a generation on PSK callbacks to drop stale applies

2026-10-07 13:30:52 +02:00

manager.go

[client] pqkem: bind the configured pre-shared key into the PQ PSK

2026-10-19 16:37:25 +02:00

message_test.go

[client] pqkem: signal a responder failure distinctly from "no KEM"

2026-10-07 13:38:42 +02:00

message.go

[client] pqkem: mention *ErrorMsg in the Decode doc comment

2026-10-09 09:50:09 +02:00

secret_test.go

[client] pqkem: bind the configured pre-shared key into the PQ PSK

2026-10-19 16:37:25 +02:00