VCL Protocol

⚠️ Development Branch

You're viewing the main branch which is under active development. Code here may be unstable or incomplete.

✅ For stable version: crates.io/vcl-protocol

Verified Commit Link — Cryptographically chained packet transport protocol

📚 Documentation

README | Usage Guide | Crates.io | Docs.rs | GitHub

📖 About

VCL Protocol is a transport protocol where each packet cryptographically links to the previous one, creating an immutable chain of data transmission. Inspired by blockchain principles, optimized for real-time networking.

v0.4.0 adds a hybrid transport system with TCP/UDP abstraction, automatic packet fragmentation and reassembly, sliding window flow control, and a flexible configuration system with presets for VPN, gaming, and streaming use cases.

Published on crates.io: https://crates.io/crates/vcl-protocol API Documentation: https://docs.rs/vcl-protocol

✨ Features

Feature	Description
🔐 Cryptographic Chain	Each packet references hash of previous packet via SHA-256
✍️ Ed25519 Signatures	Fast and secure digital signatures
🔑 X25519 Handshake	Ephemeral key exchange, no pre-shared keys needed
🔒 XChaCha20-Poly1305	Authenticated encryption for all payloads
🛡️ Replay Protection	Sequence numbers + nonce tracking prevent packet replay
🚪 Session Management	close(), is_closed(), timeout handling
⏱️ Inactivity Timeout	Auto-close idle connections (configurable)
✅ Chain Validation	Automatic integrity checking on every packet
⚡ UDP Transport	Low latency, high performance
🔌 TCP Transport	Reliable ordered delivery for VPN scenarios
🔀 Transport Abstraction	Single API works with both TCP and UDP
🚫 Custom Error Types	Typed `VCLError` enum with full `std::error::Error` impl
📡 Connection Events	Subscribe to lifecycle & data events via async mpsc channel
🏓 Ping / Heartbeat	Built-in ping/pong with automatic round-trip latency measurement
🔄 Key Rotation	Rotate encryption keys mid-session without reconnecting
🏊 Connection Pool	Manage multiple connections under a single `VCLPool` manager
🧩 Packet Fragmentation	Automatic split and reassembly for large payloads
🌊 Flow Control	Sliding window with RTT estimation and retransmission detection
⚙️ Config Presets	VPN, Gaming, Streaming, Auto — one line setup
📝 Tracing Logs	Structured logging via `tracing` crate
📊 Benchmarks	Performance benchmarks via `criterion`
📖 Full API Docs	Complete documentation on docs.rs
🧪 Full Test Suite	89/89 tests passing (unit + integration + doc)

🏗️ Architecture

Packet N        Packet N+1      Packet N+2
+--------+     +--------+     +--------+
| hash   |     | prev   |     | prev   |
| 0x00.. | --> | 0x00.. | --> | 0x3a.. |
| sig    |     | sig    |     | sig    |
+--------+     +--------+     +--------+

hash(Packet N) -> stored in prev_hash of Packet N+1
hash(Packet N+1) -> stored in prev_hash of Packet N+2

Handshake Flow

Client                          Server
   |                               |
   | -- ClientHello (pubkey) ----> |
   |                               |
   | <---- ServerHello (pubkey) -- |
   |                               |
   | [Shared secret computed]      |
   | [Secure channel established]  |

Encryption Flow

Send: plaintext → fragment? → encrypt(XChaCha20) → sign(Ed25519) → send
Recv: receive → verify(Ed25519) → decrypt(XChaCha20) → reassemble? → plaintext

Session Management

- close()         → Gracefully close connection, clear state
- is_closed()     → Check if connection is closed
- set_timeout()   → Configure inactivity timeout (default: 60s)
- last_activity() → Get timestamp of last send/recv

Event Flow

conn.subscribe() → mpsc::Receiver<VCLEvent>

Events:
  Connected          → handshake completed
  Disconnected       → close() called
  PacketReceived     → data packet arrived { sequence, size }
  PingReceived       → peer pinged us (pong sent automatically)
  PongReceived       → our ping was answered { latency: Duration }
  KeyRotated         → key rotation completed
  Error(msg)         → non-fatal internal error

Key Rotation Flow

Client                              Server
   |                                   |
   | -- KeyRotation(new_pubkey) -----> |
   |                                   |
   | <--- KeyRotation(new_pubkey) ---- |
   |                                   |
   | [both sides now use new key]      |

Connection Pool

VCLPool::new(max)
   |
   ├── bind("addr") → ConnectionId(0)
   ├── bind("addr") → ConnectionId(1)
   ├── bind("addr") → ConnectionId(2)
   |
   ├── connect(id, peer)
   ├── send(id, data)
   ├── recv(id) → VCLPacket
   ├── ping(id)
   ├── rotate_keys(id)
   ├── close(id)
   └── close_all()

Fragmentation Flow (v0.4.0)

send(large_payload)
   |
   ├── payload > fragment_size?
   |     YES → Fragmenter::split → [Frag0][Frag1][Frag2]...
   |            each fragment encrypted + signed separately
   |     NO  → single Data packet
   |
recv()
   |
   ├── PacketType::Fragment → Reassembler::add(frag)
   |     incomplete → loop, wait for more fragments
   |     complete   → return reassembled VCLPacket
   └── PacketType::Data → return directly

Flow Control (v0.4.0)

FlowController (sliding window)
   |
   ├── can_send()          → window has space?
   ├── on_send(seq)        → register packet as in-flight
   ├── on_ack(seq)         → remove from window, update RTT
   ├── timed_out_packets() → detect lost packets
   └── loss_rate()         → f64 packet loss rate

Config Presets (v0.4.0)

VCLConfig::vpn()       → TCP + Reliable   (VPN, file transfer)
VCLConfig::gaming()    → UDP + Partial    (games, real-time)
VCLConfig::streaming() → UDP + Unreliable (video, audio)
VCLConfig::auto()      → Auto + Adaptive  (recommended default)

🚀 Quick Start

Installation

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
cargo add vcl-protocol

Run Demo

cargo run

Run Tests

cargo test

Run Benchmarks

cargo bench

Event Subscription Example

use vcl_protocol::connection::VCLConnection;
use vcl_protocol::VCLEvent;

#[tokio::main]
async fn main() {
    let mut conn = VCLConnection::bind("127.0.0.1:0").await.unwrap();
    let mut events = conn.subscribe();

    tokio::spawn(async move {
        while let Some(event) = events.recv().await {
            match event {
                VCLEvent::Connected              => println!("Connected!"),
                VCLEvent::PongReceived { latency } => println!("Latency: {:?}", latency),
                VCLEvent::KeyRotated             => println!("Keys rotated!"),
                VCLEvent::Disconnected           => break,
                _                                => {}
            }
        }
    });

    conn.connect("127.0.0.1:8080").await.unwrap();
}

Connection Pool Example

use vcl_protocol::VCLPool;

#[tokio::main]
async fn main() {
    let mut pool = VCLPool::new(10);

    let id = pool.bind("127.0.0.1:0").await.unwrap();
    pool.connect(id, "127.0.0.1:8080").await.unwrap();
    pool.send(id, b"Hello from pool!").await.unwrap();

    let packet = pool.recv(id).await.unwrap();
    println!("{}", String::from_utf8_lossy(&packet.payload));

    pool.close(id).unwrap();
}

Config Preset Example (v0.4.0)

use vcl_protocol::connection::VCLConnection;
use vcl_protocol::config::VCLConfig;

#[tokio::main]
async fn main() {
    let mut server = VCLConnection::bind_with_config(
        "127.0.0.1:8080",
        VCLConfig::vpn()
    ).await.unwrap();

    server.accept_handshake().await.unwrap();
    let packet = server.recv().await.unwrap();
    println!("Received: {}", String::from_utf8_lossy(&packet.payload));
}

📦 Packet Structure

pub struct VCLPacket {
    pub version: u8,             // Protocol version (2)
    pub packet_type: PacketType, // Data | Ping | Pong | KeyRotation | Fragment
    pub sequence: u64,           // Monotonic packet sequence number
    pub prev_hash: Vec<u8>,      // SHA-256 hash of previous packet
    pub nonce: [u8; 24],         // XChaCha20 nonce for encryption
    pub payload: Vec<u8>,        // Decrypted data payload (after recv())
    pub signature: Vec<u8>,      // Ed25519 signature
}

📊 Benchmarks

Measured on WSL2 Debian, optimized build (cargo bench):

Operation	Time
keypair_generate	~13 µs
encrypt 64B	~1.5 µs
encrypt 16KB	~12 µs
decrypt 64B	~1.4 µs
decrypt 16KB	~13 µs
packet_sign	~32 µs
packet_verify	~36 µs
packet_serialize	~0.8 µs
packet_deserialize	~1.1 µs
full pipeline 64B	~38 µs
full pipeline 4KB	~48 µs

🎯 Use Cases

💰 Financial Transactions

Immutable audit log of all transactions with cryptographic proof of integrity.

🎮 Anti-Cheat Systems

Verify integrity of game events and detect tampering in real-time.

📋 Audit Logging

Cryptographically proven data integrity for compliance and debugging.

🔐 Secure Communications

Authenticated, encrypted channel with replay protection and session management.

🌐 VPN Tunnels

TCP transport + reliable delivery + fragmentation — ready for VPN-grade traffic.

🔬 Technical Details

Cryptography

Hashing: SHA-256
Signatures: Ed25519
Key Exchange: X25519
Encryption: XChaCha20-Poly1305 (AEAD)
Key Generation: CSPRNG
Replay Protection: Sequence validation + nonce tracking (1000-entry window)

Transport

UDP — low latency, default
TCP — reliable, ordered (VPN mode)
Runtime: Tokio async
Max Packet Size: 65535 bytes
TCP Framing: 4-byte big-endian length prefix

Fragmentation (v0.4.0)

Threshold: configurable via VCLConfig::fragment_size (default 1200 bytes)
Out-of-order reassembly: supported
Duplicate fragments: silently ignored
Max pending messages: 256 (configurable)

Flow Control (v0.4.0)

Algorithm: Sliding window
RTT estimation: SRTT = 7/8 × SRTT + 1/8 × RTT
RTO: dynamic, min 50ms
Window size: configurable via VCLConfig::flow_window_size

Serialization

Format: Bincode
Efficiency: Minimal overhead, fast serialization

Dependencies

ed25519-dalek — Ed25519 signatures
x25519-dalek — X25519 key exchange
chacha20poly1305 — XChaCha20-Poly1305 AEAD encryption
sha2 — SHA-256 hashing
tokio — Async runtime
serde + bincode — Serialization
tracing — Structured logging
tracing-subscriber — Log output

🛠️ Development

cargo test                         # Run all tests (89/89)
cargo test --lib                   # Unit tests only
cargo test --test integration_test # Integration tests only
cargo bench                        # Run benchmarks
cargo run --example server         # Run example server
cargo run --example client         # Run example client
cargo fmt                          # Format code
cargo clippy                       # Linting
cargo build --release              # Release build
cargo doc --open                   # Generate and open docs locally

📄 License

MIT License — see LICENSE file for details.

👤 Author

ultrakill148852-collab — Creator of the VCL Protocol

GitHub: @ultrakill148852-collab

🙏 Acknowledgments

Ed25519 — Fast and secure cryptography
X25519 — Efficient elliptic-curve key exchange
XChaCha20-Poly1305 — Modern authenticated encryption
Tokio — Asynchronous runtime for Rust
Rust — The language that makes the impossible possible

Made with ❤️ using Rust

⬆️ Back to top

vcl-protocol 0.4.0

VCL Protocol

📚 Documentation

📖 About

✨ Features

🏗️ Architecture

Handshake Flow

Encryption Flow

Session Management

Event Flow

Key Rotation Flow

Connection Pool

Fragmentation Flow (v0.4.0)

Flow Control (v0.4.0)

Config Presets (v0.4.0)

🚀 Quick Start

Installation

Run Demo

Run Tests

Run Benchmarks

Event Subscription Example

Connection Pool Example

Config Preset Example (v0.4.0)

📦 Packet Structure

📊 Benchmarks

🎯 Use Cases

💰 Financial Transactions

🎮 Anti-Cheat Systems

📋 Audit Logging

🔐 Secure Communications

🌐 VPN Tunnels

🔬 Technical Details

Cryptography

Transport

Fragmentation (v0.4.0)

Flow Control (v0.4.0)

Serialization

Dependencies

🛠️ Development

📄 License

👤 Author

🙏 Acknowledgments