* Noise XK work in progress.
* A whole lot more Noise_XK work... exchange almost done.
* Delete a bunch of commented out old Noise_IK code.
* Add back in send() and a few other things to Noise_XK ZSSP.
* Some p384 experiment in attic
* A ton of ZSSP work, and put MPL on ZSSP.
* updated kbkdf512 to use the modern nist standard
* Parameterize KBKDF on resulting output key size the way NIST likes.
* updated variable comment
* Make the label a const parameter on kbkdf.
* updated variable comment
* Add MPL to utils and other stuff.
* layout tweak
* Some more ZSSP work and a VDF we may use.
* warning removal
* More ZSSP work, add benchmarks for mimcvdf.
* Almost ready to test...
* Build fix.
* Add automatic retransmission in the earliest stages of session init.
* Just about ready to test... wow.
* It opens a session.
* ZSSP basically works...
---------
Co-authored-by: mamoniot <mamoniot@protonmail.com>
- Went back to a single session counter instead of two counter states
- Went to a full 64-bit counter in the header as recommended by Noise, turns
out there is a good reason. It simplifies everything.
- Implemented Monica's simpler stateless counter window algorithm, but
also only one on the whole session.
- Simplified some counter logic generally.
- Header check codes are temporarily gone, coming back in a different form.
This is being committed "on top" of what was there instead of reverting the old
commits to preserve the history.