peach-relay / a8379a3f2049

docs: name the client-side encryption stack the relay receives (v0.3.5) Adds a 'what travels over the wire' layer list to the security section, grounded in peach-browser source: TLS > Noise (X25519 / ChaCha20-Poly1305 / BLAKE2s, NK first-pair + KK reconnect, Rust snow core) > at-rest vault envelope (AES-256-GCM + Argon2id 64MiB/t3/p4 + BLAKE3). Notes HKDF-SHA256 hourly rendezvous rotation and points readers to the client files to verify.

dev · 6 weeks ago · 2026-07-29 · 260.2 KB

parent: 0f87cee635ce