Adrien Beraud 7bc287fe2f network_engine: encrypt the DHT protocol ...

Nodes using transport encryption derive their node ID from their X25519
transport key, advertise it in plaintext messages ("k") and in node
lists ("k4"/"k6"), and encrypt all traffic with nodes whose key is
known. Keys are bound to node IDs, so they can't be forged, and
plaintext messages never move a node known to support encryption.
Legacy nodes keep talking in plaintext.

Private networks (TransportConfig::authorities) only accept nodes with
a credential issued by one of the network authorities, never send or
accept plaintext, and introduce themselves to addresses with a Hello.

2026-10-29 23:28:48 -04:00

..

opendht

network_engine: encrypt the DHT protocol

2026-10-29 23:28:48 -04:00

opendht.h

Switch project license from GPL-3.0-or-later to MIT

2026-01-17 22:25:43 -05:00