Alan-Jowett / sonde / 23804294089
82%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 77
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.128%. Remained the same
23804294089

push

github

web-flow 
docs: AES-256-GCM protocol migration spec (issue #495) (#601)

* docs: AES-256-GCM protocol migration spec (issue #495)

Replace HMAC-SHA256 with AES-256-GCM across the entire radio protocol.
Simplify pairing by eliminating gateway asymmetric identity.

- protocol.md: unified AES-GCM frame format
- ble-pairing-protocol.md: simplified registration, AEAD pairing
- security.md: updated threat model
- gateway/node/pairing-tool requirements: crypto changes
- validation docs: updated test cases

28 requirements modified, 16 retired, 8 new.
Phase 1 report: docs/evolve-495-phase1.md

Relates-to: #495

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: fix 4 Phase 3 audit findings in AES-GCM spec

- Update gateway-design.md §5.2/5.3/6/17 for AES-GCM (was still HMAC)
- Fix 3 test cases referencing retired GW-1213/GW-1214
- Fix T-1214 PSK: node_psk → phone_psk for PEER_REQUEST
- Add GW-1220 coverage note to T-1220
- Fix stale GW-1213 ref in T-1224, HMAC row in §2, Ed25519 in §10a

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review findings: align message names and requirement traceability

- Replace all REGISTER_ACK references with PHONE_REGISTERED (0x82) per
  ble-pairing-protocol.md §5.5 throughout ble-pairing-tool-validation.md
- Retarget T-PT-307 from retired PT-0404 to active PT-1102 (AES-GCM AAD)
- Retarget T-PT-308 from retired PT-0405 to active PT-0407, PT-1102
- Update NEW-REG-002 in evolve-495-phase1.md to reflect that
  PHONE_REGISTERED is success-only; rejections use ERROR (0xFF) envelope

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address round 2 review findings: fix 10 unresolved threads

- gateway-design.md: retire §17.1 gateway_id (GW-1201/GW-1203), retire
  §17.3 REQUEST_GW_INFO (GW-1206), update §17.4 REGISTER_PHONE to
  phone-generated PSK with plaintext ACK (GW-1209), fix §17.5 key-hint
  consistency to validate node_key_hint vs SHA-256(node_psk)[30..3... (continued)

23509 of 27616 relevant lines covered (85.13%)

153.44 hits per line

Jobs
ID Job ID Ran Files Coverage
1 23804294089.1 77
85.13
 GitHub Action Run
Source Files on build 23804294089