riccardom b10fc220f3 [client] pqkem: route PSK commits and data-path sends through helpers ...

Preparation for authenticating data-path messages (security review of
#7098, finding F-003). The authentication needs the existing PSK while a
new one is being derived, to produce a MAC attached to the offers and their
answers that proves they are authentic. So committing a new PSK must keep
the previous one, and a reply must be sealed with the PSK that verified the
offer rather than the one just committed. Today both operations are inlined
at their call sites.

Pure refactor, no behaviour change: the two PSK commit sites call
commitPSKLocked, and pushDataPath delegates the endpoint lookup and send to
sendDataPath.

2026-10-19 17:02:15 +02:00

..

bench_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

callbacks.go

[client] pqkem: carry a generation on PSK callbacks to drop stale applies

2026-10-07 13:30:52 +02:00

capability_test.go

[client] pqkem: fix the capability-signal wording in a test comment

2026-10-09 09:51:05 +02:00

concurrency_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

convergence_test.go

[client] pqkem: enforce exchange roles and re-bootstrap stale signal offers

2026-09-11 15:03:47 +02:00

convergence.go

[client] pqkem: route PSK commits and data-path sends through helpers

2026-10-19 17:02:15 +02:00

env.go

[client] pqkem: preserve group scope in the slog-to-logrus handler

2026-10-09 09:51:41 +02:00

kem_framing_test.go

Adds test to validate compromised keys are not accepted

2026-09-11 14:48:54 +02:00

kem_test.go

Addresses CI fixes

2026-09-11 14:48:54 +02:00

kem.go

[client] pqkem: bind the configured pre-shared key into the PQ PSK

2026-10-19 16:37:25 +02:00

manager_test.go

[client] pqkem: carry a generation on PSK callbacks to drop stale applies

2026-10-07 13:30:52 +02:00

manager.go

[client] pqkem: route PSK commits and data-path sends through helpers

2026-10-19 17:02:15 +02:00

message_test.go

[client] pqkem: signal a responder failure distinctly from "no KEM"

2026-10-07 13:38:42 +02:00

message.go

[client] pqkem: mention *ErrorMsg in the Decode doc comment

2026-10-09 09:50:09 +02:00

secret_test.go

[client] pqkem: bind the configured pre-shared key into the PQ PSK

2026-10-19 16:37:25 +02:00