riccardom 824055c1c7 pqkem: strict (fail-closed) mode + wire status Quantum resistance ...

Strict mode (NB_PQ_MLKEM_STRICT, default off) closes the initial PQ-vulnerable
window (NET-1408): when enabled, conn.presharedKey programs a per-conn random
sentinel PSK until the ML-KEM exchange derives the real one, so no session can form
on a non-PQ key (the real PSK is pushed via SetPresharedKey once it converges).
Default stays opportunistic.

Also surface PQ status: the peer 'Quantum resistance' flag (RosenpassEnabled) is now
true when an ML-KEM PSK has been derived for the peer, not only for Rosenpass.

2026-07-31 10:49:27 +02:00

..

conntype

[client] Feature/lazy connection (#3379)

2025-05-21 11:12:28 +02:00

dispatcher

[client] Feature/lazy connection (#3379)

2025-05-21 11:12:28 +02:00

guard

[client] Fix backoff.Ticker goroutine leak in reconnect guard

2026-07-03 12:23:11 +02:00

ice

Fix nil pointer panic in ICE agent during sleep/wake cycles (#5261)

2026-02-05 12:06:28 +01:00

id

[client] Feature/lazy connection (#3379)

2025-05-21 11:12:28 +02:00

worker

[client] Feature/lazy connection (#3379)

2025-05-21 11:12:28 +02:00

conn_status_eval_test.go

[client] Supress ICE signaling (#5820)

2026-04-21 15:52:08 +02:00

conn_status_test.go

[client] Feature/lazy connection (#3379)

2025-05-21 11:12:28 +02:00

conn_status.go

[client] Index peer tunnel IPs for faster PeerStateByIP lookup (#6412)

2026-06-12 10:24:15 +02:00

conn_test.go

[client] Fix WGWatcher silently failing to restart on fast disconnect/reconnect (#6664)

2026-07-14 10:21:59 +02:00

conn.go

pqkem: strict (fail-closed) mode + wire status Quantum resistance

2026-07-31 10:49:27 +02:00

endpoint.go

[client] Refactor WG endpoint setup with role-based proxy activation (#5277)

2026-02-17 19:28:26 +01:00

env.go

[relay] evict foreign client cache on disconnect (#6015)

2026-04-28 15:04:48 +02:00

error_test.go

Test conn (#199)

2022-01-21 13:52:19 +01:00

error.go

Test conn (#199)

2022-01-21 13:52:19 +01:00

handshaker_listener_test.go

[client] Recreate agent when receive new session id (#4564)

2025-10-08 17:14:24 +02:00

handshaker_listener.go

[client] Recreate agent when receive new session id (#4564)

2025-10-08 17:14:24 +02:00

handshaker.go

Fixes second answer dropped (the one carrying the PQ KEM data)

2026-07-28 14:31:14 +02:00

iface.go

pqkem: rotate PSK in kernel mode instead of skipping

2026-07-31 10:49:27 +02:00

listener.go

Add OnDisconnecting service callback (#767)

2023-03-29 10:39:54 +02:00

metrics_saver_test.go

[client] Feature/client metrics (#5512)

2026-03-22 12:45:41 +01:00

metrics_saver.go

[client] Feature/client metrics (#5512)

2026-03-22 12:45:41 +01:00

nilcheck.go

[client] Nil check on ICE remote conn (#2806)

2024-10-31 23:18:35 +01:00

notifier_test.go

[client] release Status.mux before invoking notifier callbacks (#6039)

2026-05-04 11:59:01 +02:00

notifier.go

[client, android] Fix/notifier threading (#3807)

2025-05-27 17:12:04 +02:00

route.go

[client] Set up firewall rules for dns routes dynamically based on dns response (#3702)

2025-04-24 17:37:28 +02:00

session_id.go

[client] Fix/ice handshake (#4281)

2025-08-18 20:09:50 +02:00

signaler.go

Communicate the port over the signal exchange

2026-07-27 17:09:36 +02:00

state_dump.go

[client] add profiling dumps to debug package (#3517)

2025-03-23 13:46:09 +01:00

status_test.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

status.go

[client] Keep session deadline visible across reconnects (#6847)

2026-07-22 15:22:16 +02:00

wg_watcher_test.go

[client] Fix WGWatcher silently failing to restart on fast disconnect/reconnect (#6664)

2026-07-14 10:21:59 +02:00

wg_watcher.go

[client] Fix WGWatcher silently failing to restart on fast disconnect/reconnect (#6664)

2026-07-14 10:21:59 +02:00

worker_ice.go

[client] Drop signaling-side ICE candidate filter, drop overlay STUN at mux read-side instead (#6142)

2026-06-15 16:37:03 +02:00

worker_relay.go

[client, relay] Advertise relay server IP via signal for foreign-relay fallback dial (#6004)

2026-05-04 11:40:25 +02:00