feat(ss): support none/dummy cipher via no-op AEAD implementation

The go-gost fork of go-shadowsocks2 dropped built-in support for the
none/dummy cipher that was present in the original go-shadowsocks2.
Combined with the SS components' hard requirement for auth (and
therefore a valid cipher), this made gost fail to start with
method=none or method=dummy.

Add a no-op cipher in x/internal/util/ss/none/ that implements the
core.ShadowCipher interface using the standard go-shadowsocks2 AEAD
framing (salt + length-prefixed chunks, target address embedding)
without actual encryption.  SaltSize=16 ensures random salts on every
connection to avoid bloom-ring replay detection.

Update SS TCP connector/handler and SS UDP connector/handler to detect
method=none/dummy (case-insensitive) and use the no-op cipher instead
of utils.NewClientConfig/NewServerConfig.

Fixes go-gost/x#105

handler/ss/handler.go

@@ -7,6 +7,7 @@ import (
 	"crypto/tls"
 	"errors"
 	"net"
+	"strings"
 	"time"
 
 	"github.com/go-gost/core/bypass"
@@ -21,6 +22,7 @@ import (
 	ictx "github.com/go-gost/x/internal/ctx"
 	xnet "github.com/go-gost/x/internal/net"
 	"github.com/go-gost/x/internal/util/sniffing"
+	"github.com/go-gost/x/internal/util/ss/none"
 	tls_util "github.com/go-gost/x/internal/util/tls"
 	rate_limiter "github.com/go-gost/x/limiter/rate"
 	xstats "github.com/go-gost/x/observer/stats"
@@ -64,14 +66,22 @@ func (h *ssHandler) Init(md md.Metadata) (err error) {
 	method := h.options.Auth.Username()
 	password, _ := h.options.Auth.Password()
 
-	serverConfig, err := utils.NewServerConfig(method, password, h.md.users)
-	if err != nil {
-		return err
-	}
-	h.server = core.NewTCPServer(serverConfig)
-	err = h.server.Init()
-	if err != nil {
-		return err
+	if strings.EqualFold(method, "none") || strings.EqualFold(method, "dummy") {
+		h.server = core.NewTCPServer(core.ServerConfig{Cipher: none.Cipher, Users: h.md.users})
+		err = h.server.Init()
+		if err != nil {
+			return err
+		}
+	} else {
+		serverConfig, err := utils.NewServerConfig(method, password, h.md.users)
+		if err != nil {
+			return err
+		}
+		h.server = core.NewTCPServer(serverConfig)
+		err = h.server.Init()
+		if err != nil {
+			return err
+		}
 	}
 
 	for _, ro := range h.options.Recorders {

handler/ss/udp/handler.go

@@ -6,6 +6,7 @@ import (
 	"errors"
 	"fmt"
 	"net"
+	"strings"
 	"sync"
 	"time"
 
@@ -20,6 +21,7 @@ import (
 	ictx "github.com/go-gost/x/internal/ctx"
 	"github.com/go-gost/x/internal/net/udp"
 	"github.com/go-gost/x/internal/util/relay"
+	"github.com/go-gost/x/internal/util/ss/none"
 	rate_limiter "github.com/go-gost/x/limiter/rate"
 	xrecorder "github.com/go-gost/x/recorder"
 	"github.com/go-gost/x/registry"
@@ -62,21 +64,35 @@ func (h *ssuHandler) Init(md md.Metadata) (err error) {
 	method := h.options.Auth.Username()
 	password, _ := h.options.Auth.Password()
 
-	serverConfig, err := utils.NewServerConfig(method, password, h.md.users)
-	if err != nil {
-		return err
-	}
-	serverConfig.UDPTimeout = time.Minute
-	h.udpServer = core.NewUDPServer(serverConfig)
-	err = h.udpServer.Init()
-	if err != nil {
-		return err
-	}
+	if strings.EqualFold(method, "none") || strings.EqualFold(method, "dummy") {
+		c := core.ServerConfig{Cipher: none.Cipher, Users: h.md.users, UDPTimeout: time.Minute}
+		h.udpServer = core.NewUDPServer(c)
+		err = h.udpServer.Init()
+		if err != nil {
+			return err
+		}
+		h.tcpServer = core.NewTCPServer(c)
+		err = h.tcpServer.Init()
+		if err != nil {
+			return err
+		}
+	} else {
+		serverConfig, err := utils.NewServerConfig(method, password, h.md.users)
+		if err != nil {
+			return err
+		}
+		serverConfig.UDPTimeout = time.Minute
+		h.udpServer = core.NewUDPServer(serverConfig)
+		err = h.udpServer.Init()
+		if err != nil {
+			return err
+		}
 
-	h.tcpServer = core.NewTCPServer(serverConfig)
-	err = h.tcpServer.Init()
-	if err != nil {
-		return err
+		h.tcpServer = core.NewTCPServer(serverConfig)
+		err = h.tcpServer.Init()
+		if err != nil {
+			return err
+		}
 	}
 
 	for _, ro := range h.options.Recorders {