Skip to content

Secure Authentication and Workflow Automation

Choose a tag to compare

View all tags
@itsVentie itsVentie released this 30 Jun 16:08
v1.0.1
0b13d7c
This commit was signed with the committer’s verified signature.
itsVentie Ventie
GPG key ID: 2ED2D49AD31F7450
Verified
Learn about vigilant mode.

This minor release introduces critical security enhancements and improves developer experience by automating verification processes.

Key Changes

  • HMAC-based Authentication: Added a two-stage handshake verification. The server now validates incoming connections using a pre-shared secret via HMAC-SHA256 before initiating resource-heavy PQC operations.
  • Automation Suite: Introduced test.ps1 to streamline local development. The script performs static analysis (go vet), runs race-detector-enabled tests, and builds the binaries.
  • Resilience: Improved error handling for socket binding, ensuring cleaner process lifecycles and better reporting on address/port conflicts.
  • Documentation Update: Updated README.md to reflect the new authentication parameters and deployment workflow.

Quick Start

To use the new authentication feature, provide a -secret flag to both the server and the client:

Server

./pqc-proxy -mode server -listen :8081 -target 127.0.0.1:9091 -secret "YourSecret"

Client

./pqc-proxy -mode client -listen :3000 -target 127.0.0.1:8081 -secret "YourSecret"

Verification

You can now run the comprehensive test suite to ensure everything is functioning correctly before building:

.\test.ps1
Assets 4
Loading