Alan-Jowett / sonde / 23821619865
80%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 82
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.024%. Remained the same
23821619865

push

github

web-flow 
feat(node): add AES-256-GCM frame processing behind feature flag (#495) (#611)

* feat(node): add AES-256-GCM frame processing behind feature flag (#495)

- Add \NodeAead\ implementing \AeadProvider\ using \es-gcm\ crate
- Feature-gated WAKE/COMMAND/APP_DATA/PEER_REQUEST frame encode/decode
  with AES-GCM via \es-gcm-codec\ feature flag
- Add \chunked_transfer_aead\, \send_recv_app_data_aead\, and
  \peer_request_exchange_aead\ for full AEAD coverage
- Existing HMAC path unchanged (default)
- Tests for AEAD round-trip, auth failure, and frame encoding

Implements: #495 (Phase 5, node layer - additive)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Wire AEAD into wake cycle; fix PEER_REQUEST payload limit

- Add run_wake_cycle_aead: feature-gated entry point that uses
  AES-256-GCM for all radio frame encoding/decoding (WAKE/COMMAND,
  PEER_REQUEST/PEER_ACK, chunked transfer, PROGRAM_ACK).  HMAC is
  still passed through for BPF helper dispatch and PEER_ACK proof.

- Fix build_peer_request_frame_aead: use AEAD-specific payload
  budget (218 bytes) instead of reusing the HMAC-era 202-byte
  \PEER_PAYLOAD_MAX_LEN\ constant.

- Remove #[allow(dead_code)] from AEAD helper functions now called
  via run_wake_cycle_aead.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review findings: AEAD test coverage

- Fix AEAD oversize test to use PEER_PAYLOAD_MAX_LEN_AEAD (218) instead
  of PEER_PAYLOAD_MAX_LEN (202), and add exact-boundary acceptance test.
- Add AEAD peer registration tests: verify_peer_ack_aead valid/wrong
  nonce/wrong proof/wrong key, plus exchange success and timeout.
- Add AEAD chunked transfer tests: success, retry exhaustion, and wrong
  chunk index rejection.
- Add AEAD end-to-end wake cycle tests: NOP flow, UpdateProgram with
  chunked transfer and BPF execution, and wrong msg_type discard.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address round-3 revi... (continued)

24805 of 29174 relevant lines covered (85.02%)

145.72 hits per line

Jobs
ID Job ID Ran Files Coverage
1 23821619865.1 82
85.02
 GitHub Action Run
Source Files on build 23821619865