Implement NTS (RFC 8915) with KERecord zero-copy frame, PerformKE
(TLS 1.3 + ExportKeyingMaterial), DeriveKeys, and Client state
machine implementing lneto.StackNode. Client handles cookie pool
management, auth body codec with nonce/ciphertext, and two-exchange
NTP flow with UniqueID verification and AEAD authentication.
Add NTS Server wrapping ntp.Server with AEAD verification/sealing,
and HandleKE for server-side NTS Key Exchange over TLS 1.3.
Use internal.LogAttrs for non-allocating structured logging
throughout the NTS client, matching existing conventions.
Generated with LLM assistance.
Signed-off-by: Marvin Drees <marvin.drees@9elements.com>
Pat Whittingslow
Marvin Drees