Alan-Jowett / sonde / 23967867044
82%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 83
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 81.11% (-4.3%) from 85.446%
23967867044

push

github

web-flow 
feat: remove legacy HMAC-SHA256 and ECDH/HKDF code (#629)

* docs: replace HMAC/ECDH/HKDF references with AES-256-GCM AEAD

Update all specification documents to reflect that AES-256-GCM (AEAD)
is now the sole frame authentication and encryption mechanism. This
aligns the docs with the code changes from PRs #627 (gateway/node AEAD)
and #628 (BLE pairing AEAD).

Changes across 18 files:
- Replace \HmacProvider\ trait references with \AeadProvider\
- Update frame format descriptions (HMAC tag → AEAD tag, 32B → 16B)
- Update codec function names (\ncode_frame\/\decode_frame\ → \ead_seal\/\ead_open\)
- Update error descriptions (HMAC verification → AEAD authentication failure)
- Update PEER_REQUEST/PEER_ACK verification to describe AES-256-GCM flow
- Update BLE pairing tool design to remove ECDH/HKDF sections (marked RETIRED)
- Update implementation guide dependencies (\hmac\ → \es-gcm\)
- Update IETF FAQ to describe AES-256-GCM instead of HMAC-SHA-256

Preserved:
- All RETIRED requirement markers (no IDs changed)
- \volve-495-phase1.md\ transition document (historical reference)
- Test function names that reference HMAC (code identifiers)
- T-0503c rejection test (validates old HMAC format is rejected)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* feat: remove legacy HMAC-SHA256 and ECDH/HKDF code

All ESP-NOW frames and BLE pairing now use AES-256-GCM exclusively.
Removes the legacy HMAC-SHA256 frame codec, ECDH key exchange, HKDF
key derivation, and the aes-gcm-codec feature flag.

Protocol: deleted codec.rs, removed HmacProvider trait, ungated AEAD
Gateway: removed HMAC engine path, ECDH BLE handler, migrated tests
Node: removed HMAC wake cycle, peer request, BPF dispatch fallback
Pair: removed ECDH Phase 1/2, HMAC crypto, simplified store
E2E: removed HMAC harness, ungated AEAD tests
Specs: updated 18 docs replacing HMAC/ECDH with AEAD references

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sig... (continued)

662 of 839 new or added lines in 6 files covered. (78.9%)

248 existing lines in 14 files now uncovered.

19781 of 24388 relevant lines covered (81.11%)

147.99 hits per line

Uncovered Changes

Lines Coverage ∆ File
176
84.79
 -10.33% crates/sonde-node/src/wake_cycle.rs
1
97.86
 -0.07% crates/sonde-node/src/bpf_dispatch.rs

Coverage Regressions

Lines Coverage ∆ File
97
72.01
 -12.75% crates/sonde-gateway/src/handler.rs
47
78.12
 -8.2% crates/sonde-e2e/src/harness.rs
40
85.28
 -5.95% crates/sonde-gateway/src/engine.rs
13
87.39
 -11.71% crates/sonde-pair/src/transport.rs
10
81.68
 -14.5% crates/sonde-pair/src/phase2.rs
9
17.14
 -25.71% crates/sonde-node/src/error.rs
7
84.79
 -10.33% crates/sonde-node/src/wake_cycle.rs
7
80.0
 -2.97% crates/sonde-pair/src/file_store.rs
6
0.0
 -60.0% crates/sonde-node/src/bpf_runtime.rs
5
84.05
 -2.16% crates/sonde-node/src/program_store.rs
3
14.81
 -4.63% crates/sonde-pair/src/types.rs
2
97.86
 -0.07% crates/sonde-node/src/bpf_dispatch.rs
1
0.0
 0.0% crates/sonde-protocol/src/error.rs
1
91.78
 -0.46% crates/sonde-protocol/src/messages.rs
Jobs
ID Job ID Ran Files Coverage
1 23967867044.1 83
81.11
 GitHub Action Run
Source Files on build 23967867044