Module circuit 

Encrypted onion circuit data plane.

Security model: forward layers are wrapped from exit to entry with the selected hop session public keys. Each relay decrypts exactly one ElGamal-AEAD layer and learns only the immediate next hop plus an opaque inner layer. Backward frames carry a client-encrypted AEAD payload and relays forward them with local return state.

Structs

OnionAuthenticatedPayload

Client-decrypted backward payload plus the exit session proof that authenticated it.

OnionBackwardFrame

Backward direction: exit -> relays -> client.

OnionBackwardNonce

Random nonce for one backward payload on a circuit.

OnionBackwardPath

Authenticated immediate path used to originate one backward cell at an exit.

OnionBackwardSequence

Monotonic exit-to-client sequence number within one circuit.

OnionCircuitEvent

One typed onion-circuit input accepted by the pure reducer.

OnionCircuitExitFrame

Fully decrypted forward frame that has reached the exit adapter.

OnionCircuitId

Edge-local circuit id.

OnionCircuitPayload

Opaque application payload carried over a route-aware onion circuit.

OnionCircuitProtocol

Encrypted onion circuit protocol.

OnionCircuitShell

Interpreter for route-aware circuit effects.

OnionCircuitState

Stateful return-hop table for encrypted relay circuits.

OnionClientReturn

Client return key encrypted into the exit layer.

OnionForwardFrame

Forward direction: client -> relays -> exit.

OnionForwardNonce

Random nonce for one forward exit payload on a circuit.

OnionForwardSequence

Monotonic client-to-exit sequence number within one circuit.

OnionReturnId

Client/exit-only id used to authenticate backward payloads.

OnionVerifiedPayload

Backward payload that has passed exit identity, signature, and freshness checks.

Enums

OnionCellBucket

Public size classes used by encrypted onion cells.

OnionCircuitCapabilities

Capabilities this node enables for the onion circuit data plane.

OnionCircuitEffect

Effects emitted by the route-aware circuit reducer.

OnionCircuitSecurity

Security mode implemented by the current circuit wire format.

Constants

MAX_ONION_CIRCUIT_HOPS

Maximum route length encoded by local clients and maximum relay hop-budget value accepted per decrypted layer.

ONION_CIRCUIT_NAMESPACE

Namespace used by route-aware onion circuit messages.

ONION_CIRCUIT_SECURITY

Current circuit security mode.

Traits

OnionCircuitHandler

Runtime-specific circuit handling.

Functions

encode_initial_forward

Encode the first forward frame for route.

route_first_hop

Return the first overlay hop of a route that was validated at construction.