Alan-Jowett / sonde / 23670434641
82%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 76
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.704%. Remained the same
23670434641

push

github

web-flow 
Add T-1005 export plaintext key leakage test (GW-1001) (#535)

* Add T-1005 export plaintext key leakage test (GW-1001)

Register nodes with known PSKs, export state, and assert no PSK
bytes appear as a contiguous substring anywhere in the encrypted
bundle. Also verifies wrong-passphrase import is rejected without
altering state, and correct-passphrase import restores functional
PSKs (WAKE accepted from both restored nodes).

Closes #522

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review findings for T-1005 export key leakage test

- Add wrong-passphrase import test against a fresh gateway (step 5b)
  to validate nodes are not restored and WAKE is rejected, per T-1005
  step 5 in gateway-validation.md
- Update doc comment to accurately describe the test procedure
  (remove BPF program ingestion mention that was not implemented)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Update doc header for T-1005 and add non-empty bundle assertion

- Update module doc comment to include T-1005 in the test range.
- Add non-empty assertion before PSK substring scan to prevent
  vacuously passing on an empty export bundle.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Alan Jowett <alan.jowett@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

22799 of 26602 relevant lines covered (85.7%)

158.94 hits per line

Jobs
ID Job ID Ran Files Coverage
1 23670434641.1 76
85.7
 GitHub Action Run
Source Files on build 23670434641