- Add GenerateChallenge() for random 32-byte challenge generation - Add SignChallenge() using HMAC-SHA256 with shared secret - Add VerifyChallenge() with constant-time comparison - Update performHandshake() to send challenge and verify response - Update handleWSUpgrade() to sign incoming challenges - Add comprehensive tests for challenge-response flow The challenge-response authentication proves the peer has the matching private key for their public key by signing a random challenge with the ECDH-derived shared secret. This prevents impersonation attacks. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| database | ||
| logging | ||
| mining | ||
| node | ||