Max Lv 556c1f0696 Add allocation-free C++ AEAD codecs ...

src/crypto/aead.hpp implements the SIP004/SIP007 AEAD ciphers as value
types: AeadEngine holds the libsodium or Mbed TLS GCM state by value,
AeadTcpEncryptor/AeadTcpDecryptor frame the chunk stream with a fixed
reassembly buffer, and aead_udp_seal/open handle packets. HKDF-SHA1 runs
on stack SHA-1 state instead of Mbed TLS's allocating HMAC API.

The bundled Mbed TLS config now enables MBEDTLS_BLOCK_CIPHER_C, which
keeps the AES context inside mbedtls_gcm_context, so GCM key setup no
longer allocates. That alone saves the C programs two allocations per
connection.

test_crypto_aead_cpp checks HKDF against RFC 5869 and crypto_hkdf, runs
TCP streams and UDP packets between the C and C++ implementations in
both directions for all five AEAD methods, and covers tampering,
framing and salt replay. alloc_steady_crypto_aead runs it under the
malloc counter and requires zero allocations across 600 new
connections and 600 packets (tests/alloc_audit/check_steady.py).

ss_strict_warnings() now applies -Wextra per source file so targets
mixing new C++ with converted C modules keep the latter at -Wall, and
Result gains move assignment.

2026-10-14 22:51:56 +08:00

..

workflows

Add allocation-free C++ AEAD codecs

2026-10-14 22:51:56 +08:00

dependabot.yml

bump workflow actions to docker official provided

2020-09-30 09:30:22 +08:00

FUNDING.yml

Create FUNDING.yml

2020-12-13 18:19:43 +08:00

issue_template.md

Update issue_template.md (#1201)

2017-02-06 09:19:24 +08:00