ouroboros/src/irmd, branch be

ipcpd: Add flow overshoot protection to mb-ecn

2026-07-22T07:04:47+00:00

The ECN marks were the only source of congestion information, and going into congestion collapse (dropping a lot of ECN packets and causing loss of signal) was unrecoverable. The sender's slow-start ramp clock now tracks a measured RTT to avoid overshooting into congestion collapse on the previously fixed (14ms) doubling on long-delay (e.g. 100ms) links. The flow allocator now carries a periodic heartbeat/ack to keep RTT estimates up-to-date. The heartbeat also serves as a congestion collapse detector: consecutive heartbeat losses will go into loss recovery, halving the window and pausing Additive Increase until the path is clear. The DT component now has a max_rtt config parameter that serves as a hint for the layer RTT to optimize slow-start for low-latency networks. These two mechanisms follow TCP, however only during slow start up to the first ECN signal and to recover from a total collapse until the ECN signal returns. MB-ECN is still fully RTT-independent in the AI/PD region. A shorter RTT path will just reach its equal fair share faster than a longer RTT path. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Fix congestion config from file

2026-07-19T09:44:35+00:00

The configfile logic was matching "lfa" instead of "mb-ecn". Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Reject rekey without KEX config

2026-07-19T09:44:35+00:00

A rekey without KEX config should be rejected rather than downgrading to plaintext. Tests added. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Fix oap_test suppression list

2026-07-19T09:44:35+00:00

he crypto-disabled branch of the test driver referenced two tests that were folded into test_oap_ts_reject_all() and missed newer ones. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Avoid in-place byteswap in OAP header

2026-07-19T09:44:35+00:00

gcc 12 -fanalyzer misclassifies kex_len = hton16(kex_len) followed by memcpy(&kex_len) as a read of an uninitialized value. Write the swapped value through the scratch variable like every other field in write_oap_fixed(). Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Harden OAP client KEM completion

2026-07-19T09:44:35+00:00

do_client_kex_complete_kem() filled key_buf in the server-encap branch and returned early in the client-encap branch; any other mode value would fall through and memcpy an uninitialized stack buffer into the session key. The client only ever sets the two known modes today, but nothing local enforces that and the server derives its mode from a wire bit. Give each mode an explicit path with no fall-through. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Fix strdup error checks in registry

2026-07-19T09:44:35+00:00

reg_proc_add_name() and reg_prog_add_name() checked the already validated entry pointer instead of the fresh strdup. Found by gcc static analyzer. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Move AUTH test macros to OAP common.h

2026-07-08T09:02:24+00:00

The ML-DSA OAP test defined CLI_AUTH/NO_CLI_AUTH and passed them for the srv_auth parameters of the re-key tests. Rename to the neutral AUTH/NO_AUTH already used by oap_test.c and move the pair to the shared common.h. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Test OAP KEM re-key floor

2026-07-08T09:02:23+00:00

Add tests for two client-encap KEM properties the server enforces: reject a client KDF below the server floor, and confirm a re-key forces ephemeral server-encap. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Expand and parametrize OAP tests

2026-07-08T09:02:23+00:00

Parametrize the re-key roundtrips over the full (srv_auth, cli_auth) matrix. Add a KEM re-key axis, request-ID and cleartext-echo tamper tests, and an unsupported cipher/kdf/digest NID cluster guarded by an assertion. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders