- omnivox::server::<T>()/client::<T>() builders; plain closures, enum in,
match in the callback — the original C++ UX with the ceremony removed
- serde + bincode replace the hand-rolled Cereal codec (vectors.rs still
governs the crypto leaves via the C++ golden oracles)
- v2.1 frames: u32 len | type | ct | tag; nonce derived from the sequence
counter (no wire nonce), type byte authenticated as AAD; any frame-level
failure is fatal, authenticated-but-undecodable payloads are skipped
- stream lane: send_stream/on_stream, 1 MiB frames, shared sequence with
messages (exact sender interleaving preserved); see dump-agent/viewer
- per-connection bounded queues + writer tasks; reply/reply_stream are
non-blocking try_send lanes for callbacks
- benches: seal/open criterion group + transport harness (spray msg/s,
stream GiB/s, raw loopback baseline)
- profile.dev.package scrypt/pbkdf2 opt-level 3: golden-vector scrypt at
N=2^17 was unusable in debug builds
- PROTOCOL-V2.md and README rewritten for v2.1
Red-team review of the (byte-exact) v1 port found replay, cross-session
frame portability, pre-auth allocation amplification, and a symmetric
key that let either peer forge as itself — flaws inherent to the v1
wire format. v2 closes them:
- fixed 69-byte OVX2 hello; server validates before replying; v1 and
wrong-version peers see an immediate close
- HKDF(ephemeral X25519 DH, PSK, transcript) -> direction-separated
session keys; forward secrecy per connection
- strictly increasing u64 sequence nonces: any replay or reorder drops
the connection (regression tests in tests/protocol_v2.rs)
- Config: message-size cap (64 KiB default), connection semaphore,
idle/body-stall/handshake/send timeouts on both roles (client-side
timers retire the old no-client-timeouts quirk)
- message processing inline per connection; user callbacks panic-
isolated; poison-tolerant mutexes; demo key refused in release builds
- PROTOCOL-V2.md supersedes PARITY-CONTRACT.md (retired, kept as port
history); Cereal payload encoding is unchanged
Payload serialization remains byte-exact with the original C++ (the
golden scrypt/cereal vectors still govern). Zero unsafe. Verified live:
server<->client handshake, encrypted echo, clean teardown.
Cuts over from the C++ implementation, which is deleted (phase 5 of the
port contract); it remains in the original gitea repository.
michael