Skip to content

Releases: getlantern/samizdat

Release list

v0.0.2

v0.0.2 Latest
Latest

Choose a tag to compare

View all tags
@myleshorton myleshorton released this 19 Feb 23:16
v0.0.2
fafc5a8
This commit was signed with the committer’s verified signature.
myleshorton Myles Horton
SSH Key Fingerprint: fKNfakYzgqglv5BFHvyIPXhXDUYByimB4Y9SPP7/gr4
Verified
Learn about vigilant mode.

What's Changed

  • Add Serve(net.Listener) for external listener support

Full Changelog: v0.0.1...v0.0.2

Assets 2
Loading

v0.0.1

v0.0.1

Choose a tag to compare

View all tags
@myleshorton myleshorton released this 18 Feb 17:35
v0.0.1
9c5b7b4
This commit was signed with the committer’s verified signature.
myleshorton Myles Horton
SSH Key Fingerprint: fKNfakYzgqglv5BFHvyIPXhXDUYByimB4Y9SPP7/gr4
Verified
Learn about vigilant mode.

Initial release of the Samizdat censorship circumvention protocol.

Samizdat makes proxy traffic indistinguishable from a browser visiting a real website over HTTP/2, defeating the full spectrum of modern DPI techniques including those deployed by Russian TSPU infrastructure.

Key features:

  • Single TLS 1.3 layer with Chrome fingerprint via uTLS (no TLS-over-TLS)
  • HTTP/2 CONNECT tunneling with multiplexed streams on one TCP connection
  • PSK-based authentication embedded in the TLS SessionID field
  • TCP-level masquerade to a real domain for active probe resistance
  • Geneva-inspired TCP fragmentation of the ClientHello at the SNI boundary
  • Traffic shaping with Chrome-profile padding and timing jitter

See the README for full protocol details, threat model, and usage.

Loading