From 3afe6455b285329198805a47e8f79d407f402415 Mon Sep 17 00:00:00 2001
From: orignal <i2porignal@yandex.ru>
Date: Sun, 6 Apr 2025 15:34:01 -0400
Subject: [PATCH] reset nonce to 0 before payload encrypt/decrypt for
 ML-KEM-512

---
 libi2pd/ECIESX25519AEADRatchetSession.cpp | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/libi2pd/ECIESX25519AEADRatchetSession.cpp b/libi2pd/ECIESX25519AEADRatchetSession.cpp
index 5e7faefe..37481d96 100644
--- a/libi2pd/ECIESX25519AEADRatchetSession.cpp
+++ b/libi2pd/ECIESX25519AEADRatchetSession.cpp
@@ -334,7 +334,10 @@ namespace garlic
 			// static key, fs is apk
 #if OPENSSL_PQ
 			if (m_PQKeys)
+			{	
 				SetRemoteStaticKey (i2p::data::CRYPTO_KEY_TYPE_ECIES_MLKEM512_X25519_AEAD, fs);
+				CreateNonce (0, nonce); // reset nonce
+			}	
 			else	
 #endif			
 				SetRemoteStaticKey (i2p::data::CRYPTO_KEY_TYPE_ECIES_X25519_AEAD, fs); 
@@ -600,6 +603,10 @@ namespace garlic
 		{
 			GetOwner ()->Decrypt (m_RemoteStaticKey, sharedSecret, m_RemoteStaticKeyType); // x25519 (ask, bpk)
 			MixKey (sharedSecret);
+#if OPENSSL_PQ
+		if (m_RemoteStaticKeyType == i2p::data::CRYPTO_KEY_TYPE_ECIES_MLKEM512_X25519_AEAD)
+			CreateNonce (0, nonce); // reset nonce	
+#endif			
 		}
 		else
 			CreateNonce (1, nonce);