Design authenticated ONP/1 session handshake and topic authorization

[devkyato]

Problem

TLS can authenticate transport peers, but OpenNet currently has no protocol-level identity, session negotiation, or topic authorization helpers. Applications should not invent incompatible authentication envelopes.

Deliverable

Write an extension proposal before code. It should cover:

• client and server identity model;
• challenge/response or TLS-bound authentication;
• replay resistance and clock-free embedded devices;
• topic allow/deny policy;
• key rotation and credential storage on ESP32/Raspberry Pi;
• explicit failure frames without leaking secrets;
• downgrade protection and ONP/1 compatibility;
• test vectors and security analysis.

Non-goals

• Custom cryptographic primitives.
• Treating CRC-32 as authentication.
• Shipping default passwords or disabling certificate validation.

Acceptance criteria

A reviewed specification, threat analysis, cross-language test vectors, and an implementation plan split into independently testable pull requests.