Module links 

The core link primitives: the LinkId both ends derive, the negotiated LinkMode, and the AES-256 session LinkKey, HKDF of the ECDH shared secret salted by the link_id. Establishment frames live in handshake; per-link state in table.

Modules

channel

data

establish

handshake

identify

RNS 1.4.2 Link.identify / Packet.LINKIDENTIFY (0xFB).

maintenance

request

RNS 1.4.2 Link.request (context 0x09) and its answer (0x0A).

resources

RNS 1.4.2 Resources: the sender seals the whole stream once under the session key and slices the ciphertext into parts; the receiver pulls parts by 4-byte map hashes inside a sliding window. The link is the authentication; no signature rides the transfer.

table

The per-link state a node holds from LINKREQUEST to ACTIVE (RNS 1.4.2 Link.status):

transported

The links this node carries for others (RNS 1.4.2’s Transport.link_table).

Structs

LinkId

LinkKey

A link’s derived session key: 64-byte AES-256 Token key (32-byte signing half ‖ 32-byte encryption half)

Enums

LinkMode

The cipher a link negotiates. RNS 1.4.2 enables only MODE_AES256_CBC (ENABLED_MODES = [0x01]).

Constants

LINK_KEY_LEN

MAX_LINK_MTU

The absolute ceiling on a negotiated link MTU: RNS 1.4.2’s top optimise_mtu tier (exactly 524,288 bytes, what a ≥1 Gbps wire wants). A safety bound, not a per-interface size: a link negotiates its own interface’s hardware_mtu (see link_mtu_ceiling), and neither host nor embedded buffers pay this ceiling (they size per interface, or to their own hardware).