kleidos/test/ble/test_link_security/ at main · jmrp.io/kleidos

[READ-ONLY] Mirror of https://github.com/jmrplens/kleidos. Kleidos — Hardware BLE password manager for ESP32-S3 (M5StickC Plus2, StickS3, M5Stack Gray, T-Deck, Cardputer) jmrplens.github.io/kleidos/

Fork 0

kleidos / test / ble / test_link_security /

at main 1 file

José M. Requena Plens Re-check link encryption before each HID report burst (R3) 7w ago

9950b5d6

test_link_security.cpp

Re-check link encryption before each HID report burst (R3) Defense-in-depth: even though pairing/auth is gated up front, re-verify the live connection is still encrypted + authenticated (via ble_gap_conn_find on the active handle) immediately before ble_gatts_notify_custom, so a keystroke report is never transmitted over a link that lost security between the auth gate and the send. Fail-closed: on a non-secure state the burst aborts and no report is emitted (no keystroke bytes logged). The check is a single conn-state read on the typing hot path. Extracted into a testable link_security.h helper with a native test suite (secure → sends, insecure → aborts). Claude-Session: https://claude.ai/code/session_01Y7Cy1HetRp6TZAUAeekN8X

1 month ago

Configure Feed

Configure Feed