swaitsandClaude Opus 4.7
d785e35919
Set up the protocol spec as an mdBook and add a GitHub Actions workflow that builds it on every push/PR and deploys to GitHub Pages on main. The repo is now both a machine-readable corpus and a browsable, searchable site. Structure changes (one-time, mechanical): - Rename the spec source directory from `spec/` to `src/` to match mdBook's default convention. All 21 chapter files move; their internal relative cross-links are unchanged. - Add `src/SUMMARY.md` as the mdBook table of contents, grouping chapters under Wire Format, Payloads, Cryptography & Identity, and Routing & Higher-Layer Protocols. - Add `book.toml` at repo root: title, author, search enabled, fold enabled, edit-on-GitHub links, navy theme. - Add `.github/workflows/mdbook.yml`: build on push + PR, deploy on push to main only (configure-pages + upload-pages-artifact + deploy-pages from actions/). - Add `/book/` to .gitignore. Reference updates so the old path is fully retired: - Every `spec_ref` in `corpus/**/*.json` rewritten from `spec/` to `src/` (54 files). - Schema description text and example path in `corpus/schema/test-vector.schema.json`. - `README.md`: prominent link to the published site near the top; "What's Here" updated for the new layout. - `CONTRIBUTING.md`: spec-editing instructions point at `src/` and note the SUMMARY.md requirement. - `CLAUDE.md`: directory-layout notes updated. CHANGELOG.md historical entries intentionally keep their `spec/` paths since those record what the paths were at the time of those commits. After this lands, the user needs to enable GitHub Pages in repo settings with source = "GitHub Actions" (one-time, manual). The workflow will then publish to https://swaits.github.io/meshcore-spec/ on every push to main. Verified locally: `mdbook build` produces a clean book/ tree with all 21 chapters rendered and the SUMMARY-driven sidebar populated. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
70 lines
2.2 KiB
JSON
70 lines
2.2 KiB
JSON
{
|
|
"$schema": "../../schema/test-vector.schema.json",
|
|
"name": "Encrypted Payload - MAC Verification",
|
|
"spec_ref": "src/06-payload-encrypted.md",
|
|
"protocol_version": 0,
|
|
"description": "Tests MAC verification: valid MACs must pass, tampered MACs or ciphertext must fail.",
|
|
"vectors": [
|
|
{
|
|
"id": "mac-001",
|
|
"description": "Valid MAC with known ciphertext",
|
|
"type": "encode_decode",
|
|
"structured": {
|
|
"header": {
|
|
"version": 0,
|
|
"payload_type": "txt_msg",
|
|
"route_type": "flood"
|
|
},
|
|
"path": {
|
|
"hash_size": 1,
|
|
"hash_count": 0,
|
|
"hashes": []
|
|
},
|
|
"payload": {
|
|
"dest_hash": "AB",
|
|
"src_hash": "CD",
|
|
"cipher_mac": "EAB5",
|
|
"ciphertext": "D9FD218D50A4409143A7243D6D913502"
|
|
}
|
|
},
|
|
"binary": "09 00 ABCD EAB5 D9FD218D50A4409143A7243D6D913502",
|
|
"crypto_context": {
|
|
"shared_secret": "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F",
|
|
"plaintext": "48656C6C6F"
|
|
}
|
|
},
|
|
{
|
|
"id": "mac-002",
|
|
"description": "Tampered MAC (first byte changed)",
|
|
"type": "invalid",
|
|
"binary": "09 00 ABCD 00B5 D9FD218D50A4409143A7243D6D913502",
|
|
"expected_error": "mac_invalid",
|
|
"notes": "MAC changed from EAB5 to 00B5. MACThenDecrypt must return 0."
|
|
},
|
|
{
|
|
"id": "mac-003",
|
|
"description": "Tampered MAC (second byte changed)",
|
|
"type": "invalid",
|
|
"binary": "09 00 ABCD EA00 D9FD218D50A4409143A7243D6D913502",
|
|
"expected_error": "mac_invalid",
|
|
"notes": "MAC changed from EAB5 to EA00."
|
|
},
|
|
{
|
|
"id": "mac-004",
|
|
"description": "Tampered ciphertext (first byte changed)",
|
|
"type": "invalid",
|
|
"binary": "09 00 ABCD EAB5 00FD218D50A4409143A7243D6D913502",
|
|
"expected_error": "mac_invalid",
|
|
"notes": "Ciphertext first byte changed from D9 to 00. HMAC over modified ciphertext won't match."
|
|
},
|
|
{
|
|
"id": "mac-005",
|
|
"description": "Swapped MAC bytes",
|
|
"type": "invalid",
|
|
"binary": "09 00 ABCD B5EA D9FD218D50A4409143A7243D6D913502",
|
|
"expected_error": "mac_invalid",
|
|
"notes": "MAC bytes reversed: B5EA instead of EAB5."
|
|
}
|
|
]
|
|
}
|