Alan-Jowett / sonde / 23828683994
80%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 82
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.024%. Remained the same
23828683994

push

github

web-flow 
feat(pair): add AES-256-GCM pairing request encryption (#495) (#612)

* feat(pair): add AES-256-GCM pairing request encryption (#495)

- Feature-gated encrypt/decrypt for pairing requests using phone PSK
- AES-256-GCM with AAD=\sonde-pairing-v2\ for domain separation
- Simplified REGISTER_PHONE (phone generates PSK, no ECDH)
- Existing ECDH/HKDF/HMAC path unchanged (default)

Implements: #495 (Phase 5, sonde-pair layer — additive)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review findings for PR #612

- Return \Zeroizing<Vec<u8>>\ from \decrypt_pairing_request_aead()\ to
  prevent decrypted pairing-request material from leaking as a plain
  \Vec<u8>\ (defeats zeroize-on-drop).

- Remove unused \_store: &mut dyn PairingStore\ parameter from
  \pair_with_gateway_aead()\ — the AEAD flow does not persist artifacts
  to the store; callers are responsible for persistence.

- Update \PairingProgress\ doc comment to document both the ECDH and
  AEAD phase sequences, explaining that the AEAD flow omits
  \Authenticating\ because BLE LESC provides transport-layer auth.

- Remove unused \sonde-protocol\ optional dependency and its feature
  forwarding from \sonde-pair/Cargo.toml\ — nothing in the crate
  imports or uses \sonde-protocol\.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address round 2 review findings for PR #612

---------

Co-authored-by: Alan Jowett <alan.jowett@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

24805 of 29174 relevant lines covered (85.02%)

145.72 hits per line

Jobs
ID Job ID Ran Files Coverage
1 23828683994.1 82
85.02
 GitHub Action Run
Source Files on build 23828683994