jack 9c84d4ce4f

Fail closed on unverifiable handshake peer IDs + check SecRandomCopyBytes results (#1645) ...

Two hardening fixes from the repo evaluation:

- NoiseSessionManager.authenticatedRemoteKey returned true for peer IDs
  that are neither 16-hex wire IDs nor full Noise-key IDs — an
  accept-any-key fallback kept for test harnesses. It now fails closed;
  the Noise/integration/E2E tests that relied on it address peers by
  key-derived wire IDs instead (the pattern NoiseCoverageTests already
  used), and a new regression test pins the rejection.

- Four SecRandomCopyBytes call sites discarded the return status. The
  two verification nonces now fail their operation on error, the Nostr
  device identity seed uses CryptoKit key generation (cannot fail, and
  can no longer silently persist an all-zero seed), and BIP-340 aux
  randomness throws on failure like the adjacent nonce path.

Co-authored-by: jack <jackjackbits@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-08-08 12:12:27 +02:00

..

CourierEndToEndTests.swift

BLE transport architecture V3: one engine domain, capability ports, feature-owned state (#1498)

2026-07-29 16:03:20 +01:00

PrekeyEndToEndTests.swift

Deflake CI, and make the flake class unrepeatable (#1491)

2026-07-26 23:45:20 +01:00

PrivateChatE2ETests.swift

Fail closed on unverifiable handshake peer IDs + check SecRandomCopyBytes results (#1645)

2026-08-08 12:12:27 +02:00

PrivateMediaEndToEndTests.swift

BLE transport architecture V3: one engine domain, capability ports, feature-owned state (#1498)

2026-07-29 16:03:20 +01:00

PublicChatE2ETests.swift

chore: fix receive typo and refresh relay count in README (#1510)

2026-07-30 17:56:52 +01:00