d2abd21
This commit was signed with the committer’s verified signature.
nadimkobeissi
Nadim Kobeissi
Fixed incorrect nonce in Rust rekey implementation. The rekey function was directly constructing a 12-byte nonce with all bytes set to 0xFF (0xFFFFFFFFFFFFFFFFFFFFFFFF), bypassing the encrypt helper and its prep_nonce function. Per the Noise Protocol specification, rekey must use nonce value 2^64 - 1 passed through the standard ENCRYPT function, which zero-pads the first 4 bytes to produce 0x00000000FFFFFFFFFFFFFFFF. The rekey function now calls the encrypt primitive with MAX_NONCE, consistent with the specification and with the Go implementation generated by Noise Explorer. This fix applies to both the native Rust and WebAssembly targets. (Fixes #6)
(Re-tag in order to clean up some leftover files)