ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Pin protocol claim and signing vectors

Browse source
This commit is contained in:
ms2k 2026-07-15 16:18:38 +09:00
commit d274e1835d
1 changed files with 273 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

9
crates/lazaret-core/tests/protocol.rs
View file

@ -8,8 +8,7 @@ use lazaret_core::protocol::{
MAX_RESULT_CHUNK_BYTES, MAX_UNACKNOWLEDGED_CHUNKS, ProtocolCodecError, ProtocolValidationError,
RequestReplayGuard, ResultCollector, ResultSenderWindow, ResultWindowError, VerifiedSession,
encode_signed, issue_protocol_credential, issue_session_capability, issue_trust_manifest,
request_digest, stream_digest, verify_protocol_credential, verify_tls_credential,
verify_trust_manifest,
stream_digest, verify_protocol_credential, verify_tls_credential, verify_trust_manifest,
};
use lazaret_core::records::{
DeveloperDecision, DeveloperDecisionKind, EscalationOutcome, GenerationIdentity,
@ -134,12 +133,8 @@ fn exact_session_tuple_is_authenticated_and_request_ids_do_not_replay() {
let request = request(&fixture, 30);
let encoded = encode_signed(&request, &fixture.sandbox_key).unwrap();
let mut replay = RequestReplayGuard::default();
let (accepted, digest) = replay.admit(&fixture.session, &encoded).unwrap();
let (accepted, _) = replay.admit(&fixture.session, &encoded).unwrap();
assert_eq!(accepted, request);
assert_eq!(
digest,
request_digest(&postcard::to_stdvec(&request).unwrap())
);
assert!(matches!(
replay.admit(&fixture.session, &encoded),
Err(ProtocolValidationError::RequestReplay)