Handshake

Workflow and current contract

The default Cargo profile is protocol1-alpha. It uses SecureSession::establish with an authenticated outer transport, bootstrap context, generation, policy, and clock. Session establishment produces a confirmed bootstrap and channel binding; the application authentication transcript is a separate step.

The raw SecretStream::new and low-level handshake compatibility APIs require --no-default-features --features legacy-api. Enabling legacy-api together with protocol1-alpha is rejected at compile time. Do not present a raw Noise handshake as a default-profile session constructor or as application authorization.

Source reference

• crate declarations — network/zer0-secret-stream/src/lib.rs.
• session declarations — network/zer0-secret-stream/src/session.rs.
• protocol declarations — network/zer0-secret-stream/src/protocol.rs.
• handshake declarations — network/zer0-secret-stream/src/handshake.rs.