relay clocks and a second suite
relays can now send on their own clocks, and the gost suite runs behind the same interface as the default one.
correction, 2026-10-16: the series of release v0.3.0 on revision 2078098 does not show relays on their own clocks bringing the attack to chance; they lower its auc to medians between 0.44 and 0.67, and five runs per point cannot show more. the claim of chance below is withdrawn; the current numbers are on the research page.
relays on their own clocks
a relay can now forward cells on a fixed period of its own instead of at once. in the preliminary series this brings the correlation attack close to chance, at the price of a constant stream on every link and a longer round trip. the numbers are on the research page.
the measurement harness was corrected in the same change, and cover cells are now hidden from every hop before the exit, not only from the wire.
a second cryptographic suite
the russian standards suite (vko gost r 34.10-2012, kuznyechik-mgm, streebog) now sits behind the
same CryptoProvider contract as the default x25519, xchacha20-poly1305 and ed25519 suite, and is
switched on with -suite gost. both pass the same conformance tests. the default stays x25519, so
results remain comparable with international work.
key memory measures
memory locking, zeroing and dump prevention can now be switched off one by one through configuration, so each measure’s contribution can be measured on its own.