From 2adb53226cab9c06ffc244730dc3b6cde9f68eb2 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 2 Apr 2026 08:13:49 +0100 Subject: [PATCH] ax(node): replace prose comment with usage example on DeriveSharedSecret MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit AX Principle 2 — comments show HOW with real values, not WHAT the signature already says. The old comment restated the method name; the new comment shows the exact call pattern used in transport.go. Co-Authored-By: Charon --- pkg/node/identity.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/node/identity.go b/pkg/node/identity.go index 67683b8..5417958 100644 --- a/pkg/node/identity.go +++ b/pkg/node/identity.go @@ -166,8 +166,8 @@ func (n *NodeManager) GenerateIdentity(name string, role NodeRole) error { return nil } -// DeriveSharedSecret derives a shared secret with a peer using X25519 ECDH. -// The result is hashed with SHA-256 for use as a symmetric key. +// secret, err := nm.DeriveSharedSecret(peer.PublicKey) +// smsg.Encrypt(msg, base64.StdEncoding.EncodeToString(secret)) func (n *NodeManager) DeriveSharedSecret(peerPubKeyBase64 string) ([]byte, error) { n.mu.RLock() defer n.mu.RUnlock()