Releases · Deln0r/mls-go

First tagged release of mls-go.

What is in v0.1.0

TLS presentation language codec with QUIC varint length prefixes (RFC 9420 § 2.1, RFC 9000 § 16).
MTI ciphersuite primitives: SHA-256, HKDF, AES-128-GCM, Ed25519, HPKE base mode over DHKEM(X25519, HKDF-SHA-256) (RFC 9420 § 5, RFC 9180).
Array-based left-balanced ratchet tree with the full node-math layer (level, parent, sibling, direct path, copath, resolution, common ancestor) and the recursive tree_hash per § 7.8.
TreeKEM UpdatePath with the path_secret chain, per-node HPKE key derivation, and commit_secret at the root.
LeafNodeTBS and KeyPackageTBS Ed25519 signatures; joiner-side verification of the committer leaf signature.
Group lifecycle: KeyPackage generation, Create, AddMember, Commit, joining via Welcome, the § 8.1 key schedule (joiner_secret, epoch_secret, init_secret, confirmation_key, membership_key, epoch_authenticator).
End-to-end smoke test exercising a 3-member group, wired into CI.

See the README for the full status table and roadmap.

API is not stable; breaking changes are accepted until v1.0. Pin to a commit SHA if you depend on this.