Module replay 

Replay detection for secure traffic, as specified in the protocol’s Security chapter (§Replay Detection, §Duplicate Acknowledgement Window).

A ReplayWindow tracks one sender’s frame counters at a final destination: a monotonic baseline, a small backward bitmap for out-of-order delivery, and a bounded cache of recently accepted MICs used both to reject backward-window replays and to recognize duplicates eligible for an idempotent re-acknowledgement. It is used by the host MAC per peer and per identity, and by the device per provisioned host peer for detached acknowledgement delegation.

Structs

RecentMic

Recently accepted MIC tracked for backward-window replay handling.

ReplayWindow

Replay-detection window for secure traffic from one sender.

Enums

ReplayVerdict

Result of checking a packet against a replay window.

Constants

RECENT_MIC_CAPACITY

Retained accepted-MIC entries per window (backward window + 1).

REPLAY_BACKTRACK_SLOTS

Backward-window size in counter slots (spec suggested default).

REPLAY_STALE_MS

Out-of-order acceptance time bound (spec: 5 minutes).