zeekayandHanzo Dev 0b27349e97 The session carries a secret; the transcript belongs to the caller ...

InitiateKEMSession took a transcript, hashed six kilobytes of it into
the session, and the handshake then overwrote that hash with its own —
so the argument's only effects were a non-empty check and a cSHAKE
nobody read, once per handshake. The doc comment said the derived key
was bound to the bytes passed there, which it was not.

The KEM establishes a shared secret. The commitment is made where the
whole handshake is known, which is the only place it can be made
correctly.

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-08 01:51:43 -07:00

..

aead_test.go

The session carries a secret; the transcript belongs to the caller

2026-09-08 01:51:43 -07:00

aead.go

mesh is the peer layer, network is the validator set

2026-09-07 21:17:09 -07:00

canonical_numbering_test.go

mesh is the peer layer, network is the validator set

2026-09-07 21:17:09 -07:00

dkg_test.go

The session carries a secret; the transcript belongs to the caller

2026-09-08 01:51:43 -07:00

dkg.go

The session carries a secret; the transcript belongs to the caller

2026-09-08 01:51:43 -07:00

mlkem_test.go

The session carries a secret; the transcript belongs to the caller

2026-09-08 01:51:43 -07:00

mlkem.go

The session carries a secret; the transcript belongs to the caller

2026-09-08 01:51:43 -07:00

profile_test.go

mesh is the peer layer, network is the validator set

2026-09-07 21:17:09 -07:00

profile.go

mesh is the peer layer, network is the validator set

2026-09-07 21:17:09 -07:00

scheme.go

mesh is the peer layer, network is the validator set

2026-09-07 21:17:09 -07:00