Noise sv2 hardening - #2283

Open

bit-aloo wants to merge 21 commits into

stratum-mining:mainfrom

bit-aloo:2026-08-06-noise-sv2-hardening

Commits on Aug 11, 2026

noise_sv2: zero Initiator chaining key and hash in place
bit-aloo
committed
0cb5fc1
noise_sv2: zero Responder chaining key and hash in place
bit-aloo
committed
3ebb8c1
noise_sv2: test that erase wipes the chaining key and hash
bit-aloo
committed
b542cf3
codec_sv2: stop deriving Clone for State and HandshakeRole
bit-aloo
committed
6ca8dfa
noise_sv2: stop deriving Clone for Initiator and Responder
bit-aloo
committed
c92dee4
noise_sv2: stop deriving Clone for NoiseCodec and its ciphers
bit-aloo
committed
3460e78
noise_sv2: require CryptoRng for ephemeral key generation
bit-aloo
committed
f31936c
noise_sv2: split NoiseEngine into directional cipher halves
bit-aloo
committed
897fb53
codec_sv2: extract the noise encrypt path out of encode
bit-aloo
committed
21b6049
codec_sv2: extract the noise decrypt path out of next_frame
bit-aloo
committed
2cd8fb8
codec_sv2: add transport states for splitting a noise connection
bit-aloo
committed
a44ce3a
Add transport round trip test
bit-aloo
committed
0ed0e35
noise_sv2: wipe key material derived during the handshake
bit-aloo
committed
79c26de
noise_sv2: correct the cipher thread-safety rationale
bit-aloo
committed
e4cff37
noise_sv2: describe what erase actually wipes
bit-aloo
committed
c0fe88e
codec_sv2: leave the noise encoder usable after a failed encryption
bit-aloo
committed
4c8df86
codec_sv2: leave the noise decoder usable after a failed decryption
bit-aloo
committed
b1b9657
codec_sv2: let callers check for transport mode before splitting
bit-aloo
committed
91c1e8e
codec_sv2: cover chunking and decoder reuse in the transport tests
bit-aloo
committed
a6faf64
codec_sv2: trim the comments added by the transport-state changes
bit-aloo
committed
4c2d4df
fix encoder copy_from_slice when buffer_sv2 is enabled
bit-aloo
committed
ca5b6a9

Navigation Menu

Uh oh!

Noise sv2 hardening - #2283

Noise sv2 hardening#2283
bit-aloo wants to merge 21 commits into
stratum-mining:mainfrom
bit-aloo:2026-08-06-noise-sv2-hardening

Commits on Aug 11, 2026

noise_sv2: zero Initiator chaining key and hash in place

noise_sv2: zero Responder chaining key and hash in place

noise_sv2: test that erase wipes the chaining key and hash

codec_sv2: stop deriving Clone for State and HandshakeRole

noise_sv2: stop deriving Clone for Initiator and Responder

noise_sv2: stop deriving Clone for NoiseCodec and its ciphers

noise_sv2: require CryptoRng for ephemeral key generation

noise_sv2: split NoiseEngine into directional cipher halves

codec_sv2: extract the noise encrypt path out of encode

codec_sv2: extract the noise decrypt path out of next_frame

codec_sv2: add transport states for splitting a noise connection

Add transport round trip test

noise_sv2: wipe key material derived during the handshake

noise_sv2: correct the cipher thread-safety rationale

noise_sv2: describe what erase actually wipes

codec_sv2: leave the noise encoder usable after a failed encryption

codec_sv2: leave the noise decoder usable after a failed decryption

codec_sv2: let callers check for transport mode before splitting

codec_sv2: cover chunking and decoder reuse in the transport tests

codec_sv2: trim the comments added by the transport-state changes

fix encoder copy_from_slice when buffer_sv2 is enabled