Alan-Jowett / sonde / 23953864431

82%

Build Type

push

github

Committed by web-flow

Commit Message

docs: add missing APP_DATA AEAD validation test cases (#625)

* docs: add missing APP_DATA AEAD validation test cases

Closes #623

Adds test cases that would have caught the BPF HMAC-vs-AEAD framing
bug (#622). The validation specs previously had no tests verifying
that APP_DATA frames use the correct cryptographic authentication.

Gateway validation:
- T-0503a: APP_DATA with valid AEAD accepted (decrypts, routes to handler)
- T-0503b: APP_DATA with invalid GCM tag rejected (silent discard)
- T-0503c: APP_DATA with HMAC framing rejected by AEAD gateway

Node validation:
- T-N606a: BPF \send()\ produces AEAD-authenticated frame
- T-N606b: BPF \send_recv()\ AEAD round-trip
- T-N300: Clarified scope (HMAC path only, see T-N606a/b for AEAD)

E2E validation:
- T-E2E-032: APP_DATA AEAD end-to-end (BPF helper → AEAD frame →
  gateway decrypt → handler invocation)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

* test: implement APP_DATA AEAD validation test cases

Closes #623

Implements the test cases added to the validation specs in this branch:

Gateway (aead_engine.rs):
- T-0503a: APP_DATA with valid AEAD accepted and processed
- T-0503b: APP_DATA with corrupted GCM tag silently discarded
- T-0503c: APP_DATA with HMAC framing rejected by AEAD gateway

E2E harness fix (harness.rs):
- Remove APP_DATA→HMAC workaround in BridgeTransportAead — APP_DATA
  now routes through \process_frame_aead\ like all other frame types.
  This was masking the bug that #622/#624 fixed.
- T-E2E-051 now exercises the full AEAD APP_DATA path (serves as
  implementation of T-E2E-032).

Node-side tests (T-N606a, T-N606b) were already implemented in PR #624.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

---------

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>
Co-authored-by: Alan Jowett <alan.jowett@microsoft.com>
Co... (continued)

Coverage Stats

1 of 1 new or added line in 1 file covered. (100.0%)

4 existing lines in 1 file now uncovered.

27137 of 31702 relevant lines covered (85.6%)

135.34 hits per line