Phase 1: nonce/replay correctness + unauthenticated-command guard - #127

Closed

davelee98 wants to merge 9 commits into

OpenDisplay:mainfrom

davelee98:feat/nonce-replay-and-auth-guard

Commits on Jul 26, 2026

fix(nonce): replace 512 B replay value ring with a 32 B sliding bitmap
davelee98
committed
e2e95cd
fix(nonce): split check from commit; stop counting packet loss as tampering
davelee98
committed
a973996
fix(pipe): do not answer a nonce-dropped 0x0081 frame with a fatal NACK
davelee98
committed
ae5273a
ci: separate host-tests job for the nonce-window state machine
davelee98
committed
5adc065
test: host test for the nonce sliding-window state machine
davelee98
committed
b7e7c63
fix(nonce): review follow-ups - split log budgets, readable replay log, honest comments
davelee98
committed
273a783
fix(nonce): answer session-id mismatch with AUTH_REQUIRED, not a fatal NACK
davelee98
committed
8854a98
feat(auth): drop the BLE link after 10 consecutive unauthenticated commands
davelee98
committed
fbc7ab2
fix(auth): drop the BLE link inline on nRF; loop() is starved mid-transfer
davelee98
committed
b4fafb5