Module pqc 

Strobe NK fully-PQC transport: Classic McEliece 8192128f (static server key)

• ML-KEM-1024 (ephemeral forward-secrecy key, no classical component).

Protocol string: "StrobeNK_CME8192128_MLKEM1024/v1"

Handshake layout ────────────────

msg1 (initiator → responder, PQC_MSG1_LEN bytes):

| CME ciphertext (208 B) | ML-KEM-1024 ephemeral pk (1568 B) | MAC (32 B) |

msg2 (responder → initiator, PQC_MSG2_LEN bytes):

| ML-KEM-1024 ciphertext (1568 B) | MAC (32 B) |

Transcript (initiator side):

STROBE("StrobeNK_CME8192128_MLKEM1024/v1")
AD(responder_cme_pk)
AD(prologue)
send_clr(cme_ct)             // msg1[0..208]
KEY(ss_cme)
send_enc(mlkem_eph_pk)       // msg1[208..1776]
send_mac(32)                 // msg1[1776..1808]
recv_enc(mlkem_ct)           // msg2[0..1568]
KEY(ss_mlkem)
recv_mac(32)                 // msg2[1568..1600]

Structs

StrobeNkPqcHandshake

In-progress PQC handshake — holds the ML-KEM ephemeral key until msg2 arrives.

StrobeNkPqcInitiator

Reusable initiator config for the Strobe NK fully-PQC handshake.

StrobeNkPqcResponder

Responder side of the Strobe NK fully-PQC handshake.

Enums

Error

Constants

PQC_MSG1_LEN

Length of the first handshake message (initiator → responder). CME ciphertext (208) + ML-KEM-1024 ephemeral pk (1568) + MAC (32).

PQC_MSG2_LEN

Length of the second handshake message (responder → initiator). ML-KEM-1024 ciphertext (1568) + MAC (32).