feat(roomcrypto): direct AES-256-GCM room encryption; add client decoder#207

Merged

mliu33 merged 47 commits into

mainfrom

claude/ecdh-performance-analysis-diH42

May 21, 2026

Commits on May 20, 2026

docs(roomcrypto): add ECDH performance analysis + Stage-2 design spec
claude
committed
docs(roomcrypto): expand spec to include chat-frontend decoder in scope
claude
committed
plan(roomcrypto): implementation plan for HKDF-only encryption migration
claude
committed
feat(roomcrypto): add HKDF-only Encoder type alongside legacy Encode
claude
committed
fix(roomcrypto): wrap aeadFor errors, document eviction policy, validate key length up-front
claude
committed
test(roomcrypto): assert Encoder caches AEAD per (roomID, version)
claude
committed
test(roomcrypto): assert Encoder evicts lowest version when full
claude
committed
test(roomcrypto): cover Encoder error paths (nonce reader, key length)
claude
committed
test(roomcrypto): round-trip Encoder output via inline HKDF/GCM
claude
committed
bench(roomcrypto): add BenchmarkEncoder_Encode for the new hot path
claude
committed
feat(broadcast-worker): use HKDF-only roomcrypto.Encoder
claude
committed
fix(broadcast-worker): rename ROOMCRYPTO_CACHE_SIZE to ROOM_CRYPTO_CACHE_SIZE, log cache size at startup
claude
committed
refactor(roomcrypto): remove legacy ECIES Encode, drop crypto/ecdh dep
claude
committed
fix(roomkeystore,roomcrypto): rewrite keygen_test to use direct curve check, prune legacy benchmarks
claude
committed
test(roomcrypto): integration test uses HKDF-only scheme and rewrites TS decryptor
claude
committed
feat(subject): add RoomsKeysBootstrap subject builders
claude
committed
feat(model): add RoomsKeysResponse and RoomsKeysEntry types
claude
committed
feat(room-service): add chat.user.{account}.request.rooms.keys RPC
claude
committed
feat(chat-frontend): scaffold lib/roomcrypto with b64decode helper
claude
committed
feat(chat-frontend): add deriveAesKey via Web Crypto HKDF-SHA-256
claude
committed
feat(chat-frontend): add decryptRoomMessage via Web Crypto AES-GCM
claude
committed
test(chat-frontend): cross-language fixture for Go encode → TS decode
claude
committed
feat(chat-frontend/api): subject builders for room-key events and bootstrap RPC
claude
committed
feat(chat-frontend/api): add RoomKeyEvent + RoomKeys{Entry,Response} types
claude
committed
feat(chat-frontend/api): subscribeToRoomKeyEvents
claude
committed
feat(chat-frontend/api): fetchRoomKeysBootstrap RPC wrapper
claude
committed
feat(chat-frontend): RoomKeysContext reducer with idempotent key insert
claude
committed
feat(chat-frontend): RoomKeysProvider with bootstrap + live subscription
claude
committed
feat(chat-frontend): mount RoomKeysProvider in app tree
claude
committed
feat(chat-frontend): decrypt new-message + edit events before dispatch
claude
committed
test(chat-frontend): reducer handles decrypted event identically to plaintext
claude
committed
docs(client-api): document HKDF-only encryption and keys-bootstrap RPC
claude
committed
fix: integration tests + tighten natsListRoomKeys subject validation
claude
committed
fix(roomkeysender): update TS integration client to HKDF-only scheme
claude
committed
fix: address PR #207 review feedback
claude
committed
simplify: shrink subscriptions index + guard redundant AES cache eviction
claude
committed
chore: tighten code to reduce PR review surface
claude
committed
fix(roomcrypto): add nonce + ciphertext length guards in TS decryptor
claude
committed
refactor(broadcast-worker): make roomcrypto.Encoder an internal detail
claude
committed
refactor(roomkeystore): drop room public key, store only the 32-byte secret
claude
committed
fix: address PR #207 review — version mismatch, nil keystore, decode validation
claude
committed
fix(room-worker): use 32-byte seed key in CreateRoom integration test
claude
committed
fix: address 3 more bugs from extended review pass
claude
committed
test: integration coverage for ListSubscriptionsByAccount; unit test for rotateAndFanOut fallback
claude
committed

Commits on May 21, 2026