xssh/ssh_transport_core

bool xrtSshTransportCoreInit( xsshtransportcore* pCore, xsshrole Role, uint32 iMaxPacketSize, const xsshrekeypolicy* pRekeyPolicy, uint64 iNowMs );

sshtransportcoreinit obj;
xrtSshTransportCoreInit(&obj, pCore, Role, iMaxPacketSize, pRekeyPolicy, iNowMs);

void xrtSshTransportCoreClear(xsshtransportcore* pCore);

/* 清除 cipher、序列、协议和预算状态，不处理任何调用方缓冲。 */
result = xrtSshTransportCoreClear(pCore);

xsshcode xrtSshTransportCoreIdentificationCommit( xsshtransportcore* pCore, xsshtransportdirection Direction );

/* 提交本端 identification 已发送或对端 identification 已验证。 */
result = xrtSshTransportCoreIdentificationCommit(pCore, Direction);

bool xrtSshTransportCoreCanApplication( const xsshtransportcore* pCore, xsshtransportdirection Direction );

/* 判断对应方向当前是否允许应用消息且 NEWKEYS 密钥已经生效。 */
result = xrtSshTransportCoreCanApplication(pCore, Direction);

bool xrtSshTransportCoreKexReplyNeeded( const xsshtransportcore* pCore );

/* 判断收到对端 KEXINIT 后本端是否必须回复。 */
result = xrtSshTransportCoreKexReplyNeeded(pCore);

xsshcode xrtSshTransportCoreKexConfigure( xsshtransportcore* pCore, const xsshkexinit* pLocal, const xsshkexinit* pPeer, const xsshkexnegotiation* pNegotiation, const xsshtransportkexrules* pRules );

/* 提交双方 KEXINIT 的协商结果和当前算法消息额度。 */
result = xrtSshTransportCoreKexConfigure(pCore, pLocal, pPeer, pNegotiation, pRules);

bool xrtSshTransportCoreRekeyRequest(xsshtransportcore* pCore);

/* 请求一次策略阈值之外的主动 rekey。 */
result = xrtSshTransportCoreRekeyRequest(pCore);

xsshcode xrtSshTransportCoreRekeyCheck( const xsshtransportcore* pCore, uint64 iNowMs, xsshrekeydecision* pDecision );

/* 查询当前双向预算和时间产生的 rekey 决策。 */
result = xrtSshTransportCoreRekeyCheck(pCore, iNowMs, pDecision);

xsshcode xrtSshTransportCoreInspect( const xsshtransportcore* pCore, const xsshreader* pReader, xsshpacketneed* pNeed );

/* 探测下一包所需完整线路长度和明文工作区。 */
result = xrtSshTransportCoreInspect(pCore, pReader, pNeed);

;

/* XRT_API xsshcode xrtSshTransportCoreWritePrepareWithPadding( xsshtransportcore* pCore, xsshwriter* pWriter, xbytesview Payload, xsshpaddingproc pPadding, ptr pUserData, uint64 iNowMs ); */
result = xrtSshTransportCoreWritePrepareWithPadding();

xsshcode xrtSshTransportCoreWriteCommit( xsshtransportcore* pCore, uint64 iNowMs, xsshrekeydecision* pDecision );

/* 线路包可靠入队后提交写事务并返回更新后的 rekey 决策。 */
result = xrtSshTransportCoreWriteCommit(pCore, iNowMs, pDecision);

xsshcode xrtSshTransportCoreWriteAbort(xsshtransportcore* pCore);

/* 放弃未发送的写事务；调用方负责丢弃 writer 新增的线路字节。 */
result = xrtSshTransportCoreWriteAbort(pCore);

;

/* XRT_API xsshcode xrtSshTransportCoreReadPrepare( xsshtransportcore* pCore, xsshreader* pReader, xsshpacketview* pPacket, void* pPlain, size_t iPlainCapacity, uint64 iNowMs ); */
result = xrtSshTransportCoreReadPrepare();

xsshcode xrtSshTransportCoreReadCommit( xsshtransportcore* pCore, uint64 iNowMs, xsshrekeydecision* pDecision );

/* 接收包完成协议处理后提交状态和 rekey 预算。 */
result = xrtSshTransportCoreReadCommit(pCore, iNowMs, pDecision);

xsshcode xrtSshTransportCoreReadAbort(xsshtransportcore* pCore);

/* 放弃已认证但不能接受的接收包，并关闭不可继续推进的 transport。 */
result = xrtSshTransportCoreReadAbort(pCore);

bool xrtSshTransportCoreWriteKeysPending( const xsshtransportcore* pCore );

/* 判断本端 NEWKEYS 后是否正在等待写方向新密钥。 */
result = xrtSshTransportCoreWriteKeysPending(pCore);

bool xrtSshTransportCoreReadKeysPending( const xsshtransportcore* pCore );

/* 判断对端 NEWKEYS 后是否正在等待读方向新密钥。 */
result = xrtSshTransportCoreReadKeysPending(pCore);

xsshcode xrtSshTransportCoreSetWriteAesGcm( xsshtransportcore* pCore, xbytesview Key, xbytesview InitialIV, uint64 iNowMs );

/* 在本端 NEWKEYS 可靠入队后激活写方向 AES-GCM 与方向性 rekey 新代。 */
result = xrtSshTransportCoreSetWriteAesGcm(pCore, Key, InitialIV, iNowMs);

xsshcode xrtSshTransportCoreSetReadAesGcm( xsshtransportcore* pCore, xbytesview Key, xbytesview InitialIV, uint64 iNowMs );

/* 在对端 NEWKEYS 已认证后激活读方向 AES-GCM 与方向性 rekey 新代。 */
result = xrtSshTransportCoreSetReadAesGcm(pCore, Key, InitialIV, iNowMs);

bool xrtSshTransportCoreKexComplete( const xsshtransportcore* pCore );

/* 判断至少一代 KEX 已完成且双向 NEWKEYS 密钥均已实际生效。 */
result = xrtSshTransportCoreKexComplete(pCore);

void xrtSshTransportCoreClose(xsshtransportcore* pCore);

/* 关闭 transport；未发送写事务会安全放弃，已准备读事务不会回滚。 */
result = xrtSshTransportCoreClose(pCore);