Convert an Ed25519 public key to a Curve25519 (Montgomery) public key. Uses the bilinear map: u = (1 + y) / (1 - y) mod p where y is the Edwards y-co

Extract the 32-byte ed25519 public key from a DER-encoded X.509 certificate. Returns `None` if the certificate does not contain an ed25519 key or cann

Reconstruct announcement from stored info.

Look up the destination public key for an IP address using longest-prefix-match. Returns `None` if no route matches.

Check if an IPv6 address (16 bytes) is a valid Yggdrasil address.

Check if an IPv6 /64 prefix (first 8 bytes) is a valid Yggdrasil subnet.

Greedy routing lookup: find the best next-hop peer.

Get the MTU (ironwood MTU minus session type overhead, capped at 65535).

Record a failed handshake attempt. Returns true if the IP should now be banned.

Remove a peer by ID.

Route traffic to next hop or deliver locally.

Test if a key might be in the bloom filter. Returns true if the key might be present (could be false positive). Returns false if the key is definitely

Convert to wire format.

Add a persistent peer.

Get the local Yggdrasil IPv6 address.

Scan from 1 upward and return the lowest port not currently in use. Matches Go's linear search behavior: freed ports are reused on reconnection.

Generate four base hash values from key data using Murmur3. This replicates the Go library's `sum256` function exactly: 1. Hash data with murmur3 → h

Compute BLAKE2b-512 hash of data, optionally keyed with password.

Decrypt with a precomputed shared secret (SalsaBox already contains it).

Encrypt with a precomputed shared secret (SalsaBox already contains it).

Build an ICMPv6 Packet Too Big message. Takes the original oversized packet and the MTU to report.

Compute bytes that are signed.

Compute bytes for the signature: node || parent || seq || nonce || port

Decide whether an inbound packet should be delivered. Returns true if accepted, false if it should be dropped.

Count how many on-tree peers' bloom filters cover the given destination key. Returns (xformed_key_hex, multicast_count).

Count how many on-tree peers' bloom filters match the given already-transformed key. Used for diagnostics: distinguishes "0 targets (no peer covers th

Create TLS client configuration that accepts all server certificates and sends our certificate for mutual TLS authentication. Supports TLS 1.2 and 1.3

Create TLS server configuration with optional client certificate authentication. This uses TLS 1.3 only for maximum security (matching Go implementati

Create a new SessionInfo from init keys, consuming any pending buffer. Must be called while holding the buffers lock is NOT held (acquires it internal

Decode a bloom filter from wire format.

Decrypt an init/ack message.

Periodic maintenance (called every ~1 second). Returns a list of actions to execute.

Encrypt and produce a traffic message (cold path — used by handle_init/handle_ack where the session is not yet shared and there is zero contention).

Encode a bloom filter's backing u64 array with compression. Format: [16 bytes: flags0 (all-zero chunks)][16 bytes: flags1 (all-one chunks)][remaining

Phase 2 of split send: encrypt outside lock using snapshot.

Get the flow for a packet, creating an inactive one if needed.

External nudge to force an immediate router refresh / re-announce. Use from platform timers (e.g. Android AlarmManager) to keep the mesh view of us fr

Get a reference to a peer handle by ID.

Get link-level peer info merged with ironwood RTT/cost (for admin getPeers). Returns all configured peers (with up=false if disconnected) plus active

Get root and distances from a starting node.

Get the current send bloom for a peer (for retransmission).

Get all active encrypted sessions.

Get spanning tree entries (from ironwood).

Handle incoming path broken from a peer.

Perform the Yggdrasil handshake over a stream (TCP or TLS), then hand off to ironwood.

Check if an IP address falls within the Yggdrasil address space.

Calculate the ith hash location using the four base hash values. This replicates the Go library's `location` function exactly: location(h, i) = h[i%2

Possibly ratchet keys when receiving from remote's "next" key.

Peek at the packet type of an encoded frame (uvarint length + type byte).

Get the number of routing entries.

Run the Yggdrasil node, blocking until the shutdown signal fires. Called from both console mode (Ctrl+C) and Windows service mode (SCM stop).

Phase 3 of split send: update stats under lock.

Send a key lookup via ironwood.

Phase 1 of split send: snapshot state under lock, increment nonce.

Handle outbound traffic (from local application).

Check if we should throttle a lookup to this destination.

Sign a message for a specific recipient. Signs `[toKey || msg]` and returns `[signature(64) || msg]`.

Sign with our private key.

Parse the private key from hex.

Get the local Yggdrasil /64 subnet.

Subtract a set of exclude prefixes from a single include prefix. All prefixes must share an address family.

Update key mappings when we learn about a key (from ironwood path notify or packet receipt).