Skip to content

v0.0.1

Choose a tag to compare

View all tags
@myleshorton myleshorton released this 18 Feb 17:35
· 18 commits to main since this release
v0.0.1
9c5b7b4
This commit was signed with the committer’s verified signature.
myleshorton Myles Horton
SSH Key Fingerprint: fKNfakYzgqglv5BFHvyIPXhXDUYByimB4Y9SPP7/gr4
Verified
Learn about vigilant mode.

Initial release of the Samizdat censorship circumvention protocol.

Samizdat makes proxy traffic indistinguishable from a browser visiting a real website over HTTP/2, defeating the full spectrum of modern DPI techniques including those deployed by Russian TSPU infrastructure.

Key features:

  • Single TLS 1.3 layer with Chrome fingerprint via uTLS (no TLS-over-TLS)
  • HTTP/2 CONNECT tunneling with multiplexed streams on one TCP connection
  • PSK-based authentication embedded in the TLS SessionID field
  • TCP-level masquerade to a real domain for active probe resistance
  • Geneva-inspired TCP fragmentation of the ClientHello at the SNI boundary
  • Traffic shaping with Chrome-profile padding and timing jitter

See the README for full protocol details, threat model, and usage.

Assets 2
Loading