mirror of
https://github.com/getpaseo/paseo.git
synced 2026-10-31 21:52:54 +00:00
Mohamed Boudra
793b16c0df
Protect relay sessions against replayed commands with authenticated Noise NK negotiation, ordered records, and identity-bound security pins. Preserve legacy admission during migration and add daemon enforcement policy. All 21 CI checks passed. General engineering review is complete; specialist cryptographic review of the handwritten Noise implementation and static-key reuse remains required before release or deployment. Closes #359
21 lines
537 B
TypeScript
21 lines
537 B
TypeScript
export type { ConnectionRole, RelaySessionAttachment } from "./types.js";
|
|
|
|
export {
|
|
generateKeyPair,
|
|
exportPublicKey,
|
|
importPublicKey,
|
|
deriveSharedKey,
|
|
encrypt,
|
|
decrypt,
|
|
} from "./crypto.js";
|
|
|
|
export {
|
|
base64EncryptedWireByteLength,
|
|
createClientChannel,
|
|
createDaemonChannel,
|
|
EncryptedChannel,
|
|
maxBase64EncryptedPlaintextByteLength,
|
|
} from "./encrypted-channel.js";
|
|
export { maxSecuredPlaintextByteLength } from "./secure-channel.js";
|
|
export type { Transport, EncryptedChannelEvents } from "./encrypted-channel.js";
|