Add a packet to the queue, hard-bounded globally and per flow.

Fire-and-forget: enqueue a message to the router actor. Never blocks the caller — if the channel is full, spawns a background task.

Encode a u64 as uvarint, appending to `out`. Returns number of bytes written.

Derive a Yggdrasil IPv6 address from an ed25519 public key. Exact port of Go's `AddrForKey`.

Generate a new random Curve25519 keypair.

Parse a list of CIDR entries, where entries prefixed with `!` are treated as exclusions. Returns the minimal set of prefixes covering `(union of inclu

Create a new PacketConn. This is the primary public constructor.

Encrypt an init message from our Ed25519 key to the recipient's Ed25519 key. Wire format: [type(1)][ephemeral_pub(32)][encrypted_payload] Encrypted p

Dispatch a batch of router actions. Traffic actions are collected and sent in a single batch (one peers lock acquisition) rather than locking per pac

Encode a path (slice of PeerPort) as zero-terminated uvarints.

Reconstruct a partial ed25519 public key from this address. Used for DHT lookups. Exact port of Go's GetKey().

Create a SalsaBox (precomputed shared secret) from keys.

The signature preimage: the 32-byte secret, or an empty slice if disabled.

Sign a message with our private key.

Derive a Yggdrasil /64 subnet from an ed25519 public key. Exact port of Go's `SubnetForKey`.

Parse an IPv6 packet far enough to extract the transport-layer 5-tuple (plus TCP flags / ICMP type as needed). Returns None for: - non-IPv6 packets -

Read a packet from the network (Core) destined for the TUN. Returns the number of bytes written to `buf`.

Add a key to the bloom filter.

Encode a complete wire frame: length(uvarint) | type(u8) | payload.

Process a tree announcement. Returns true if accepted.

Get the local public key.

Encrypt and send outbound data (hot path). Uses 3-phase pattern: snapshot under lock → encrypt outside lock → finalize under lock.

Apply the bloom transform to a key. If no transform is configured, identity.

Dispatch incoming data by message type (no locking at this level).

Parse link options from a URL's query parameters.

Decode a uvarint from the front of `data`. Returns (value, bytes_consumed). Returns None if the data is insufficient or the varint is malformed.

Convert a u64 counter to a 24-byte XSalsa20 nonce. Format: 16 zero bytes followed by 8 bytes big-endian u64. Matches Go's `nonceForUint64`.

Compute the encoded size of a uvarint.

Write a packet from the TUN to the network (Core).

Write a traffic packet to ironwood, prepending the session type byte.

Get the raw backing array (for wire encoding or inspection).

Connect two PacketConn nodes via a duplex stream. Spawns `handle_conn` on both sides and returns the join handles.

Get root and path (coordinates) from root to destination.

Compute the wire size of a path.

Print rows as space-aligned columns with no borders or padding.

A queue with a large (1 MB) quantum: byte caps are far out of reach, so these tests exercise only scheduling, not eviction.

Decrypt a message using XSalsa20-Poly1305 (via crypto_box crate). Returns plaintext (ciphertext.len() - 16 bytes).

Encrypt a message using XSalsa20-Poly1305 (via crypto_box crate). Returns ciphertext (plaintext.len() + 16 bytes overhead).

Get cached coordinates for a key. Computes and caches if not present.

Create a certificate chain suitable for rustls.

Handle an init/ack update: ratchet keys forward.

Create a new EncryptedPacketConn.

Build the Salsa20/20 initial state the way `SalsaCore::new` does.

Scalar reference Salsa20/20 keystream for one block at a given counter.

Become root: create self-signed announcement.

Convert an Ed25519 private key (seed) to a Curve25519 private key. This hashes the seed with SHA-512 and takes the first 32 bytes, matching Go's `e2c

Encode metadata to wire format, signed with the given key. Wire format: "meta" (4 bytes) + length (u16 BE) + TLV fields + ed25519 signature (64 bytes)

Get or create a rumor for a destination. Returns true if the rumor was just created. Does NOT update send_time for existing rumors — use mark_rumor_se

Recompute all shared secrets after key changes.

Get distance between a path and a key in tree-space.

Merge another bloom filter into this one (bitwise OR). Both filters must have the same configuration.

Create a new SignedPacketConn.

Record an outbound flow. Outbound is never blocked.

Remove and return the next packet, applying CoDel AQM at dequeue. Packets CoDel selects are dropped (discarded) and the next is dequeued; the returned

Remove and return the next packet using deficit round robin across flows.

Create a private key suitable for rustls.

Get protocol handler (for admin debug commands).

Process a path notification response. Returns `(accepted, traffic)` where: - `accepted` is true if the path was updated (matches Go: callback only fi

Tear down the TUN adapter explicitly: abort the I/O tasks, wait for them to drop their `Arc<AsyncDevice>` references, then drop the device so the OS-l

CoDel's `should_drop`: updates `first_above_time` and reports whether the just-dequeued packet is eligible to drop (sojourn stood above TARGET for at

Compute BLAKE2b-512 auth hash matching Go's blake2b.New512(password).Write(publicKey).

Decode a zero-terminated path from `data`. Returns (path, bytes_consumed).

Remove and return the head packet of a specific flow.