Threat Model Matrix
Threat Model Matrix
Security metrics and mitigated vectors
KSP is designed defensively against typical network intrusion vectors. Here is a brief overview of our targeted mitigations:
Target Threat Mitigations
- Man-in-the-Middle (MITM): Mitigated by the Certificate binding signature which cryptographically locks ephemeral handshake parameters to the server's verified Ed25519 identity key.
- Replay Attacks: Handled by the 1024-bit sliding bitmap that rejects duplicates in O(1) time complexity. Replayed packets are dropped silently without returning errors.
- Downgrade Attacks: The HandshakeFinish exchange computes an HMAC transcript verify data over all preceding handshake frames. If an attacker tampers with version lists in the initial hellos, verification fails.
- DoS / Resource Exhaustion: Regulated by early envelope validation. Buffer allocation is strictly limited until headers pass sanity size checks.