mirror of
https://github.com/getpaseo/paseo.git
synced 2026-10-28 12:12:47 +00:00
Mohamed Boudra
793b16c0df
Protect relay sessions against replayed commands with authenticated Noise NK negotiation, ordered records, and identity-bound security pins. Preserve legacy admission during migration and add daemon enforcement policy. All 21 CI checks passed. General engineering review is complete; specialist cryptographic review of the handwritten Noise implementation and static-key reuse remains required before release or deployment. Closes #359
29 lines
823 B
TypeScript
29 lines
823 B
TypeScript
export {
|
|
openClientSecureChannel,
|
|
openDaemonSecureChannel,
|
|
PROTECTED_HANDSHAKE_FAILED_CLOSE_CODE,
|
|
PROTECTED_MODE_REQUIRED_CLOSE_CODE,
|
|
PROTECTED_MODE_REQUIRED_CLOSE_REASON,
|
|
PROTECTED_RECORD_FAILED_CLOSE_CODE,
|
|
SecureChannelRejectedError,
|
|
} from "./secure-channel.js";
|
|
export type {
|
|
ClientSecureChannelOptions,
|
|
DaemonSecureChannelOptions,
|
|
SecureChannel,
|
|
SecureChannelEvents,
|
|
SecurityMode,
|
|
} from "./secure-channel.js";
|
|
|
|
export { createClientChannel, createDaemonChannel, EncryptedChannel } from "./encrypted-channel.js";
|
|
export type { Transport, TransportMessage, EncryptedChannelEvents } from "./encrypted-channel.js";
|
|
|
|
export {
|
|
generateKeyPair,
|
|
exportPublicKey,
|
|
importPublicKey,
|
|
exportSecretKey,
|
|
importSecretKey,
|
|
} from "./crypto.js";
|
|
export type { KeyPair, SharedKey } from "./crypto.js";
|