Mining/pkg
snider a5ed7ebee6 feat: Implement challenge-response authentication for P2P (P2P-CRIT-4)
- Add GenerateChallenge() for random 32-byte challenge generation
- Add SignChallenge() using HMAC-SHA256 with shared secret
- Add VerifyChallenge() with constant-time comparison
- Update performHandshake() to send challenge and verify response
- Update handleWSUpgrade() to sign incoming challenges
- Add comprehensive tests for challenge-response flow

The challenge-response authentication proves the peer has the matching
private key for their public key by signing a random challenge with
the ECDH-derived shared secret. This prevents impersonation attacks.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-31 15:16:00 +00:00
..
database test: Add error path unit tests for context cancellation and cleanup 2025-12-31 13:04:20 +00:00
logging feat: Add structured logging package 2025-12-31 11:18:22 +00:00
mining feat: Implement peer allowlist for P2P security (P2P-CRIT-1) 2025-12-31 15:06:52 +00:00
node feat: Implement challenge-response authentication for P2P (P2P-CRIT-4) 2025-12-31 15:16:00 +00:00