mldsa65 can't work

[smallprogram]

Integrity requirements

• I have read all the comments in the issue template and ensured that this issue meet the requirements.
• I confirm that I have read the documentation, understand the meaning of all the configuration items I wrote, and did not pile up seemingly useful options or default values.
• I provided the complete config and logs, rather than just providing the truncated parts based on my own judgment.
• I searched issues and did not find any similar issues.
• The problem can be successfully reproduced in the latest Release

Description

xray-core varsion: Xray 25.10.15 (Xray, Penetrates Everything.) b69a376 (go1.25.3 linux/amd64)

server inbounds config:

{
            "port": 60443,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "aaaa07bb-7362-41bb-80d1-28ccc93ddd53",
                        "flow": "xtls-rprx-vision",
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "show": false,
                    "dest": "xxx.com:443",
                    "xver": 0,
                    "serverNames": [
                        "xxx.com"
                    ],
                    "privateKey": "privatekey..........................",
                    "shortIds": [
                        "01"
                    ],
                    "mldsa65Seed": "GtcQ5AdkIBpHylrAaagvdVM4E7NedWgkeq55XDvYl90"  //run ./xray mldsa65
                }
            }
        }

client outbounds config:

        {
            "tag": "proxy",
            "protocol": "vless",
            "settings": {
                "vnext": [
                    {
                        "address": "xxx.xxx.xxx.xxx",
                        "port": 60443,
                        "users": [
                            {
                                "id": "aaaa07bb-7362-41bb-80d1-28ccc93ddd53",
                                "security": "auto",
                                "encryption": "none",
                                "flow": "xtls-rprx-vision"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "serverName": "xxx.com",
                    "fingerprint": "chrome",
                    "show": false,
                    "publicKey": "publicKey...........",
                    "shortId": "01",
                    "mldsa65Verify": "dW3KmTdkxdnW2nSvu_qY88c7ibp2-wPik9mKBf0kvGrlVo7_EdDMeKq6oc7aJI7baLCV54qE8ya916AeK5_UQC9ccqbgauziKAbBB00PVuHWFg8CzANF3MgktcBizDZ2jx34L2nemE868-AGDkutrVy6P92s9D8zVr6JfFCznMNanifYZvsSads-YSCJidSCYgu7DgJl5uqWy6gX6q2uVKsIxt2mbhZcHiOX6UXYv378Z_Kx-dMLkSqCO-ZoTNcrzDuVohggSuJ5aipN_6sc_XV1v6nJ_DEreMnlQW_ezToOSZmG14sc3yPCtJiz_UtaNt8R0nzViDBhpK_-L9oBu8P8Bb-TesSs72NuJQGIiETMX7BK1gC3KRMLuwUNvqJr0gvK78D8hfyGqIgQU3OppmEBGfW_VnlR8OulGUIhL1toNro_1NYlPQUdXjF4h0CHKDSp65W30JFWkqjz4hekX-ItNLECKxtVuwyzVPRd00IXqZM8zxvCzy24U_pTN5W4YCPadEE5SnN8SB1NwG9QNmScfhA1xdGj455AfNGE-a4XZeOub6vcboHgbfBHei42cVfa1KigMZ8eZVlC53epk7MBw0M7pzd3b5u1Cb_2lo_CfrDHcb75fF87PkZ8Zq14GZ9Ekpj_3NAtJWdaRjrIWNnq5Xp4wOQGgjLGQgRKTfL4dDu7BPG0R7TmRP83lZNDvwWlohIGZLAAeOsGIMkhpjqWlbUL5r7PcLkw7J8CX0g_qLaIWOE51YIaUyE0b_Uo5cV7Q1i5-cUlLKJToEgAOS27wdKBAhhP7kl578ws2_gmBm_N_XT90Li6DtIkwhiUKd2qLfZeiScTg6ptteuWYK7N5JOmFtDLsp2cARSICwtNIcCrIUm4Kp0G_M3yGeFF5gqfAXb1whtvLQmG8KDrFdz71F0PaNZ7kKiXh2XKtPdJnHBoap4ZaijEpp1IgnWAZ9Dw6sUS3uRkKD_3R2SalfLzXWVhSsvCWZNX3hgPmlEsfadzhSbDBICgVBjVgEflcaGXCobVHHqdbSGDy8oInEPf2mkJxy8EnEa4U-RINus11uSacSDKOh6_L00Bv718EzJC3rkCtDXZcrGlzaoz7JcVnoq60y8mNdHxyo3SxzOqzfYuH3Nqc5Hcrq3KGYR6mogJ6cKFCl57BqFGuiaJaPwf9qCJiyU3-SFPmOGqIAuCJXFm6XFNsA3eZ4rdfPL1qikdSVG_J4E9__lEcOhrFf__blnPMptmB1S8Gv2fnnKahWyI22VyjKzoR73G43eOL215Y_HoCr0VbHXClD-AiBkxrQWLzbH2tBpM8GCVwunDNrBrtiruWjGEQlWrKfjKmFBWWM1Jp-DVAG-aWAodwBwE5pJBrZt3FQkcC4FGe98qrPX6gWnWbvRVIjNbDZ1IG6D4_eqp0cYem06EqhhXQ-go0ejioIDfFKKurT5mOWQH6DI2mXi7zvK0DqZ2VchmD_k5kXeWmUJS0zqH8OeWgizhVR8M-7kd_4F8tVVfoudgH7qmJXnBgJhm6EcvJQVeOAbG-wt5NrV77Er5LCfVre23dHnVdGJltAeoJW9PUPdoHmJ5_GEt5pedcfa88aH0d-85PsouNO-N6UfUXCWVP1nAxQOsbruneAvyErej8Ujk2bo4J3XsbqGVN4VNwWWfdvbDPnOOcCAzJJQ3RRAAdxTn1shEVSGOPsmJP56NQPqeIqq-JzK9ksG_4ewVsj0rR8l4A0sq9E_GxIaG9MqR871VPduieeeFlmne5u8k37T9xoHIayfNfjMGWSeiQ0iPI4HDBTOes0f33XXityoyYG330p9nymrONYUSObsdvsfVQla525IYVViany7yKct28NJnwJ66GeTowNyI-pIIbd08zdxmF3PJh8EIjs8ZR-L3JYwlR0hk5kbcGeZ4p-E6sR4orqVb8_FCfFSqJwSKeQnJh2SPO6A7StnFuea0BK88LiWj_IFWcJfxTHEoGelQCLwLNx-KTOQJqN-SKA6HJHUXQwg-w0nxjWm2wAQ2AlRSizbQCiXNSF6zjjueyfNOpNoPzo1rLOmhRD3SuN75Qk5MBR8NKJe8WQX0sORb8XxPkfY6wJkGC7Mb1v_nGV-9FWrsvv1wBfAw8iGW1uDbUI5C9tRZeYsDgq7pBbVU8cfbGK1-0G_qa_f5jmc1Y4q6JLW5hBGDKQeNsSUigAF2UeX1DrDslK1dolXoU3_dD5kunvCggxWj0zLWztyPFZABj1xg6IQgR70uDEXlf2uREAON-Y-p8MedngJafJ-fugb-mxG1FjgpGDvTJ4GJlYKqMCV0lvhC6AZarcb8IAutIR32al78ac2v65VavUuwpwP80fp5Bfn4ZDuwZurNsxBgVW_wVm_oWYBgZfIIasr-dIMh21g5zT3d_bYGFzbdMy2aiaG8qy6eGuy3YzwUmEM_QYRoAr8Rlzo-uQWFOMfbQhUwhRTEMUnlNKXgcleDpq_csxfBlni-RXGp8J8jPyraQ8vrhpPu0O0ay0N1Mncsdo8FXcg3BTLKXVmG74K5GpMm_so2cSNAvHaP1Qd27DNbvEklo9PtN7tQz8Z9HKAUoGhqY8VPmuDv0nTt2sCMRIU"
                }
            }
        }

After configuring mldsa65 on both the server and client sides, it was impossible to establish a connection with the server normally. However, after deleting the relevant mldsa65 configuration, it was able to communicate with the server normally.

Reproduction Method

When using the xray mldsa65 command to generate the relevant seed and Verify, communication between the server and client fails after configuration. Deleting the mldsa65 configuration restores normal communication.

Client config

{
            "tag": "proxy",
            "protocol": "vless",
            "settings": {
                "vnext": [
                    {
                        "address": "xxx.xxx.xxx.xxx",
                        "port": 60443,
                        "users": [
                            {
                                "id": "aaaa07bb-7362-41bb-80d1-28ccc93ddd53",
                                "security": "auto",
                                "encryption": "none",
                                "flow": "xtls-rprx-vision"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "serverName": "xxx.com",
                    "fingerprint": "chrome",
                    "show": false,
                    "publicKey": "publicKey...........",
                    "shortId": "01",
                    "mldsa65Verify": "dW3KmTdkxdnW2nSvu_qY88c7ibp2-wPik9mKBf0kvGrlVo7_EdDMeKq6oc7aJI7baLCV54qE8ya916AeK5_UQC9ccqbgauziKAbBB00PVuHWFg8CzANF3MgktcBizDZ2jx34L2nemE868-AGDkutrVy6P92s9D8zVr6JfFCznMNanifYZvsSads-YSCJidSCYgu7DgJl5uqWy6gX6q2uVKsIxt2mbhZcHiOX6UXYv378Z_Kx-dMLkSqCO-ZoTNcrzDuVohggSuJ5aipN_6sc_XV1v6nJ_DEreMnlQW_ezToOSZmG14sc3yPCtJiz_UtaNt8R0nzViDBhpK_-L9oBu8P8Bb-TesSs72NuJQGIiETMX7BK1gC3KRMLuwUNvqJr0gvK78D8hfyGqIgQU3OppmEBGfW_VnlR8OulGUIhL1toNro_1NYlPQUdXjF4h0CHKDSp65W30JFWkqjz4hekX-ItNLECKxtVuwyzVPRd00IXqZM8zxvCzy24U_pTN5W4YCPadEE5SnN8SB1NwG9QNmScfhA1xdGj455AfNGE-a4XZeOub6vcboHgbfBHei42cVfa1KigMZ8eZVlC53epk7MBw0M7pzd3b5u1Cb_2lo_CfrDHcb75fF87PkZ8Zq14GZ9Ekpj_3NAtJWdaRjrIWNnq5Xp4wOQGgjLGQgRKTfL4dDu7BPG0R7TmRP83lZNDvwWlohIGZLAAeOsGIMkhpjqWlbUL5r7PcLkw7J8CX0g_qLaIWOE51YIaUyE0b_Uo5cV7Q1i5-cUlLKJToEgAOS27wdKBAhhP7kl578ws2_gmBm_N_XT90Li6DtIkwhiUKd2qLfZeiScTg6ptteuWYK7N5JOmFtDLsp2cARSICwtNIcCrIUm4Kp0G_M3yGeFF5gqfAXb1whtvLQmG8KDrFdz71F0PaNZ7kKiXh2XKtPdJnHBoap4ZaijEpp1IgnWAZ9Dw6sUS3uRkKD_3R2SalfLzXWVhSsvCWZNX3hgPmlEsfadzhSbDBICgVBjVgEflcaGXCobVHHqdbSGDy8oInEPf2mkJxy8EnEa4U-RINus11uSacSDKOh6_L00Bv718EzJC3rkCtDXZcrGlzaoz7JcVnoq60y8mNdHxyo3SxzOqzfYuH3Nqc5Hcrq3KGYR6mogJ6cKFCl57BqFGuiaJaPwf9qCJiyU3-SFPmOGqIAuCJXFm6XFNsA3eZ4rdfPL1qikdSVG_J4E9__lEcOhrFf__blnPMptmB1S8Gv2fnnKahWyI22VyjKzoR73G43eOL215Y_HoCr0VbHXClD-AiBkxrQWLzbH2tBpM8GCVwunDNrBrtiruWjGEQlWrKfjKmFBWWM1Jp-DVAG-aWAodwBwE5pJBrZt3FQkcC4FGe98qrPX6gWnWbvRVIjNbDZ1IG6D4_eqp0cYem06EqhhXQ-go0ejioIDfFKKurT5mOWQH6DI2mXi7zvK0DqZ2VchmD_k5kXeWmUJS0zqH8OeWgizhVR8M-7kd_4F8tVVfoudgH7qmJXnBgJhm6EcvJQVeOAbG-wt5NrV77Er5LCfVre23dHnVdGJltAeoJW9PUPdoHmJ5_GEt5pedcfa88aH0d-85PsouNO-N6UfUXCWVP1nAxQOsbruneAvyErej8Ujk2bo4J3XsbqGVN4VNwWWfdvbDPnOOcCAzJJQ3RRAAdxTn1shEVSGOPsmJP56NQPqeIqq-JzK9ksG_4ewVsj0rR8l4A0sq9E_GxIaG9MqR871VPduieeeFlmne5u8k37T9xoHIayfNfjMGWSeiQ0iPI4HDBTOes0f33XXityoyYG330p9nymrONYUSObsdvsfVQla525IYVViany7yKct28NJnwJ66GeTowNyI-pIIbd08zdxmF3PJh8EIjs8ZR-L3JYwlR0hk5kbcGeZ4p-E6sR4orqVb8_FCfFSqJwSKeQnJh2SPO6A7StnFuea0BK88LiWj_IFWcJfxTHEoGelQCLwLNx-KTOQJqN-SKA6HJHUXQwg-w0nxjWm2wAQ2AlRSizbQCiXNSF6zjjueyfNOpNoPzo1rLOmhRD3SuN75Qk5MBR8NKJe8WQX0sORb8XxPkfY6wJkGC7Mb1v_nGV-9FWrsvv1wBfAw8iGW1uDbUI5C9tRZeYsDgq7pBbVU8cfbGK1-0G_qa_f5jmc1Y4q6JLW5hBGDKQeNsSUigAF2UeX1DrDslK1dolXoU3_dD5kunvCggxWj0zLWztyPFZABj1xg6IQgR70uDEXlf2uREAON-Y-p8MedngJafJ-fugb-mxG1FjgpGDvTJ4GJlYKqMCV0lvhC6AZarcb8IAutIR32al78ac2v65VavUuwpwP80fp5Bfn4ZDuwZurNsxBgVW_wVm_oWYBgZfIIasr-dIMh21g5zT3d_bYGFzbdMy2aiaG8qy6eGuy3YzwUmEM_QYRoAr8Rlzo-uQWFOMfbQhUwhRTEMUnlNKXgcleDpq_csxfBlni-RXGp8J8jPyraQ8vrhpPu0O0ay0N1Mncsdo8FXcg3BTLKXVmG74K5GpMm_so2cSNAvHaP1Qd27DNbvEklo9PtN7tQz8Z9HKAUoGhqY8VPmuDv0nTt2sCMRIU"
                }
            }
        }

Server config

{
            "port": 60443,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "aaaa07bb-7362-41bb-80d1-28ccc93ddd53",
                        "flow": "xtls-rprx-vision",
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "show": false,
                    "dest": "xxx.com:443",
                    "xver": 0,
                    "serverNames": [
                        "xxx.com"
                    ],
                    "privateKey": "privatekey..........................",
                    "shortIds": [
                        "01"
                    ],
                    "mldsa65Seed": "GtcQ5AdkIBpHylrAaagvdVM4E7NedWgkeq55XDvYl90"  //run ./xray mldsa65
                }
            }
        }

Client log

Server log

[RPRX]

MLDSA65 对被偷网站的证书消息长度有要求 #4915