Method ProcessSessionCreated

libi2pd/SSU2Session.cpp:1042–1117

	}

	bool SSU2Session::ProcessSessionCreated (uint8_t * buf, size_t len)
	{
		// we are Alice
		if (!m_NoiseState)
		{
			LogPrint (eLogWarning, "SSU2: Unexpected SessionCreated message");
			return false;
		}
		Header header;
		memcpy (header.buf, buf, 16);
		header.ll[0] ^= CreateHeaderMask (m_Address->i, buf + (len - 24));
		uint8_t kh2[32];
		i2p::crypto::HKDF (m_NoiseState->m_CK, nullptr, 0, "SessCreateHeader", kh2, 32); // k_header_2 = HKDF(chainKey, ZEROLEN, "SessCreateHeader", 32)
		header.ll[1] ^= CreateHeaderMask (kh2, buf + (len - 12));
		if (header.h.type != eSSU2SessionCreated)
		// this situation is valid, because it might be Retry with different encryption
			return false;
		if (len < 80)
		{
			LogPrint (eLogWarning, "SSU2: SessionCreated message too short ", len);
			return false;
		}
		m_HandshakeInterval = i2p::util::GetMillisecondsSinceEpoch () - m_HandshakeInterval;
		const uint8_t nonce[12] = {0};
		uint8_t headerX[48];
		m_Server.ChaCha20 (buf + 16, 48, kh2, nonce, headerX);
		// KDF for SessionCreated
		m_NoiseState->MixHash ( { {header.buf, 16}, {headerX, 16} } ); // h = SHA256(h || header)
		m_NoiseState->MixHash (headerX + 16, 32); // h = SHA256(h || bepk);
		uint8_t sharedSecret[32];
		m_EphemeralKeys->Agree (headerX + 16, sharedSecret);
		m_NoiseState->MixKey (sharedSecret);
		size_t offset = 64;
#if OPENSSL_PQ
		if (m_Version > 2 && m_PQKeys)
		{
			i2p::data::CryptoKeyType cryptoType = (i2p::data::CryptoKeyType)(m_Version + 2);
			size_t cipherTextLen = i2p::crypto::GetMLKEMCipherTextLen (cryptoType);
			std::vector<uint8_t> kemCiphertext(cipherTextLen);
			if (!m_NoiseState->Decrypt (buf + offset, kemCiphertext.data (), cipherTextLen))
			{
				LogPrint (eLogWarning, "SSU2: SessionCreated ML-KEM ciphertext section AEAD decryption failed");
				return false;
			}
			m_NoiseState->MixHash (buf + offset, cipherTextLen + 16);
			offset += cipherTextLen + 16;
			m_PQKeys->Decaps (kemCiphertext.data (), sharedSecret);
			m_NoiseState->MixKey (sharedSecret);
		}
#endif
		// decrypt
		if (offset + 16 > len)
		{
			LogPrint (eLogWarning, "SSU2: SessionCreated message is too short ", len);
			return false;
		}
		uint8_t * payload = buf + offset;
		std::vector<uint8_t> decryptedPayload(len - offset - 16);