kaidokert / krabitls-rs

80%

main: 80%

LAST BUILD ON BRANCH feature/kx-backend

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• agent/caliper-footprint-targets
• agent/ed25519-hardware-handshake
• agent/fix-workflow-triggers
• bench/ed25519-mtls-handshake-168mhz
• chore/bump-ed25519-krabipqc
• chore/cfg-module-reorg
• chore/cfg-reorg-followup
• chore/cfg-reorg-lib-tests
• chore/cfg-suite-advertisement
• chore/coverage-merge-combos
• chore/extract-krabitls-fixtures
• chore/hoist-infn-use
• chore/hygiene-sweep
• chore/identity-ip-host
• chore/lib-cipher-aes-tests
• chore/rsa-dispatch-tidy
• chore/rsa-verify-scheme-macro
• chore/slim-pre-commit
• chore/small-tidyups
• chore/structure-polish-6-21
• chore/test-only-cleanup
• chore/untrack-repro-scaffold
• client-auth-blinded-sign
• codex/conduct-third-pass-review-of-rust-code
• dtls-ack-correctness
• dtls-chacha-suite
• dtls-epoch2-retransmit
• dtls-recv-coalesce
• dtls-runtime-suite
• ecdhe-p256
• ecdsa-parity
• experiment/bigint-bnum-const5
• experiment/bigint-crypto-bigint-const5
• experiment/bigint-heapless-runtime-len
• experiment/bigint-heapless-unified-cap64
• experiment/heap-verify
• faster-precommit
• feat/client-cert-sig-algs
• feat/client-certs
• feat/clienthello-middlebox-compat-alpn
• feat/ecdsa-client-auth
• feat/ecdsa-e2e
• feat/ecdsa-verify
• feat/embedded-nal-client
• feat/facade-roundtrip-fixtures
• feat/fragment-client-auth-flight
• feat/key-update
• feat/mldsa-backend
• feat/mldsa-cert-fixture
• feat/mldsa-certverify
• feat/mldsa-clienthello
• feat/mlkem-keyshare
• feat/mlkem-primitive
• feat/nonblocking-try-read
• feat/post-handshake-reasm
• feat/rsa-client-auth
• feat/rsa-client-auth-cli
• feat/validity-always-on
• feature/backend-honesty-matrix
• feature/carrier-swap-proof
• feature/chain-verify
• feature/dtls-blinding
• feature/dtls-client
• feature/dtls-direct-serverhello
• feature/kx-backend
• feature/rsa-sign-widths
• feature/rsa-widths
• fix-ecdsa-canned-x25519-gate
• fix/chacha-cipher-zeroize
• fix/reconnect-scratch-reassembler
• followup/client-auth-sig-len-floor
• footprint-pqc-measurements
• footprint-representative-and-corners
• krabiecdsa-v0.4.0-alpha.1
• main
• p256-blinded-kem
• p256-primary-kx
• pr-coverage
• readme-dtls-clientcert
• readme-p256-kex-row
• refactor/central-bigint
• refactor/rsa-signing-shared-decode
• refactor/rsa-verify-shared-decode
• refactor/verifier-provider-unification
• release-0.2.0
• release-krabitls-0.5.0
• release-krabitls-0.5.1
• release/krabitls-0.4.0
• release/krabitls-0.4.1
• release/krabitls-0.6.0-alpha.1
• test/chacha-facade-openssl-fixtures
• test/mlkem-canned-handshake
• test/mtls-canned-fixture
• test/multi-suite-facade-fixtures
• x25519-kx-blinding

Build # 33088096451

Build Type

Pull #156

github

Committed by kaidokert

Commit Message

Tidy KX comments: drop journey framing, redundant layout labels, dup cfg

Comment-quality pass over the KX diff. Strip the "pre-refactor abort precedence"
journey phrasing from the hybrid derive (keep the abort-ordering invariant), drop
the wire/IKM layout labels the type rustdoc already states, and swap "the marker
is honest" → "sound". Remove a duplicate `#[cfg(feature = "mlkem")]` the mlkem_ct
removal left on `hybrid_share`, and compress two what/how comments to their WHY.

Pull Request Pull Request #156: Pluggable key exchange: ClientConfig::Kx + KxBackend (X25519 / P-256 / X25519MLKEM768)

Coverage Stats

63 of 68 new or added lines in 4 files covered. (92.65%)

5219 of 6487 relevant lines covered (80.45%)

146.33 hits per line