Latch

v1.2.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 12d Network Security

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

chacha20-poly1305 cryptography security go hybrid-cryptography kyber

+7 more

ml-kem post-quantum-cryptography rust tcp tokio udp zero-allocation

Affected surfaces

auth

Summary

AI summary

Session Resumption bypasses heavy post-quantum handshakes for faster reconnects.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Medium	Integrates lock-based client caching with mutex synchronization to prevent race conditions during concurrent connection spawns. Integrates lock-based client caching with mutex synchronization to prevent race conditions during concurrent connection spawns. Source: llm_adapter@2026-07-19 Confidence: high	—
Feature	Medium	Adds high-performance Session Resumption (Fast Reconnect) to bypass heavy post-quantum handshakes on reconnections. Adds high-performance Session Resumption (Fast Reconnect) to bypass heavy post-quantum handshakes on reconnections. Source: llm_adapter@2026-07-19 Confidence: low	—
Feature	Low	Adds standardized Bash automation script (`test.sh`) for Linux and macOS to match Windows PowerShell workflow. Adds standardized Bash automation script (`test.sh`) for Linux and macOS to match Windows PowerShell workflow. Source: llm_adapter@2026-07-19 Confidence: high	—
Feature	Low	Upgrades compilation pipeline to cross‑compile optimized binaries for macOS Intel (`darwin/amd64`) and Apple Silicon (`darwin/arm64`). Upgrades compilation pipeline to cross‑compile optimized binaries for macOS Intel (`darwin/amd64`) and Apple Silicon (`darwin/arm64`). Source: llm_adapter@2026-07-19 Confidence: high	—
Feature	Low	Implements stateful Session Resumption using server-side SessionStore and AES-GCM Ticket encryption. Implements stateful Session Resumption using server-side SessionStore and AES-GCM Ticket encryption. Source: granite4.1:30b@2026-07-19-audit Confidence: low	—
Performance	Medium	Bypasses heavy ML-KEM-768 math during reconnections via session resumption, reducing latency. Bypasses heavy ML-KEM-768 math during reconnections via session resumption, reducing latency. Source: granite4.1:30b@2026-07-19-audit Confidence: low	—

Full changelog

This major update introduces a high-performance Session Resumption (Fast Reconnect) mechanism to bypass heavy post-quantum handshakes on reconnections. We have also standardized automated workflows across Windows, Linux, and macOS.

Key Changes & Resolved Issues

Post-Quantum Session Resumption (Issue #4): Implemented a stateful session-resumption layer. Using a secure server-side SessionStore and AES-GCM Ticket encryption, returning clients can now reuse negotiated master keys. This completely bypasses heavy ML-KEM-768 math, drastically reducing latency on reconnects.
Lock-Based Client Caching: Integrated active session caching on the client side with strict mutex-based synchronization to prevent race conditions during concurrent connection spawns.
Standardized Bash Automation (test.sh): Added a Linux and macOS native verification script to parity the Windows PowerShell workflow. It executes formatting, module tidying, go vet, fuzzing, race detection, and cross-compilation.
Apple Silicon & macOS Support: Upgraded the compilation pipeline to cross-compile optimized production binaries for macOS Intel (darwin/amd64) and macOS Apple Silicon (darwin/arm64), outputting all artifacts to the managed ./dist/ directory.

Performance & Resilience Validation

The new session resumption pipeline was verified under race-detector conditions. Tests confirm smooth fallback behavior: once the Session TTL expires, both client and server gracefully fall back to a full hybrid PQC handshake without dropping active connections.

Verification

To run the new multi-platform test suite, format check, and compile all binaries (Windows, Linux, macOS) locally:

On Linux/macOS:
chmod +x test.sh
./test.sh

On Windows:
.\test.ps1

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Latch

Get notified when new releases ship.

About Latch

All releases →