Claude 774a7bcce9 fix: remaining E2EE hardening — rotation, retry, fingerprint, validation ...

Periodic key rotation:
- Key holder rotates room key every 5 minutes for forward secrecy,
  independent of participant changes. Timer managed by key holder only.

Offer retry mechanism:
- Non-key-holders re-announce their public key after 10s timeout and
  wait 5s more before giving up. Covers lost offers from target
  disconnect during async key wrapping.
- Key holder now re-sends room key offer on duplicate announces (peer
  may be re-requesting after a missed offer), instead of ignoring them.

Key fingerprint verification:
- New computeKeyFingerprint() in e2eeCrypto.ts — SHA-256 hash of raw
  public key formatted as "AB12 CD34 ..." for out-of-band verification.
  Can be displayed in UI for MITM detection.

Server hardening:
- Public key size limit tightened from 256 to 128 bytes (P-256
  uncompressed = 65 bytes = ~88 base64 chars).

Client hardening:
- WebCrypto availability check at module load — throws descriptive
  error if crypto.subtle is unavailable (non-HTTPS context).
- base64ToUint8() now wraps atob() in try-catch with clear error message.

https://claude.ai/code/session_01KKo3RwjdmcNzkgXNfUkgNT

2026-04-04 19:43:17 +00:00

..

authz_test.go

fix: address PR review findings (issues #9-#14)

2026-03-17 04:11:04 +01:00

client.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

coverage_boost2_test.go

fix: remediate low-signal Go test assertions (BUG-061)

2026-04-01 18:25:13 +02:00

coverage_boost_test.go

fix: filter voice states by channel visibility in ready payload (BUG-095)

2026-04-02 11:40:16 +02:00

dm_handlers_test.go

feat: security hardening - restrict PTT capture keys, gate devtools to DEV, fix race conditions and DM sequencing

2026-04-04 09:08:01 +02:00

errors.go

refactor: server hardening + client decomposition + protocol resilience

2026-03-21 10:08:44 +01:00

export_test.go

fix: resolve all 12 golangci-lint issues

2026-04-03 08:33:55 +02:00

handlers_chat.go

fix: comprehensive security hardening from full codebase audit

2026-04-04 16:48:57 +00:00

handlers_ping.go

fix: security hardening — 11 findings across auth, WS, upload, admin, data

2026-04-02 14:51:16 +02:00

handlers_presence.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

handlers_reaction.go

fix: close 3 security audit findings (BUG-108, BUG-122, BUG-126)

2026-04-02 10:37:34 +02:00

handlers_test.go

fix: close 3 security audit findings (BUG-108, BUG-122, BUG-126)

2026-04-02 10:37:34 +02:00

handlers_voice.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

handlers.go

feat: security hardening - restrict PTT capture keys, gate devtools to DEV, fix race conditions and DM sequencing

2026-04-04 09:08:01 +02:00

hub_test.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

hub.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

livekit_process.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

livekit_test.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

livekit_webhook.go

fix: resolve all 12 golangci-lint issues

2026-04-03 08:33:55 +02:00

livekit.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

message_types.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

messages_test.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

messages.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

origin_test.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

origin.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

registry_test.go

refactor: context propagation, LogAudit deadlock fix, ESLint v9, code quality

2026-03-29 19:39:46 +02:00

registry.go

refactor: context propagation, LogAudit deadlock fix, ESLint v9, code quality

2026-03-29 19:39:46 +02:00

ringbuffer_test.go

fix: encrypt TOTP secrets at rest and filter replay buffer by permissions

2026-04-02 15:05:56 +02:00

ringbuffer.go

fix: encrypt TOTP secrets at rest and filter replay buffer by permissions

2026-04-02 15:05:56 +02:00

serve_test.go

fix: filter voice states by channel visibility in ready payload (BUG-095)

2026-04-02 11:40:16 +02:00

serve.go

feat: security hardening - restrict PTT capture keys, gate devtools to DEV, fix race conditions and DM sequencing

2026-04-04 09:08:01 +02:00

voice_broadcast.go

feat: comprehensive spec docs, test suite, E2E overhaul, and security hardening

2026-03-28 10:39:23 +01:00

voice_controls.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

voice_e2ee.go

fix: remaining E2EE hardening — rotation, retry, fingerprint, validation

2026-04-04 19:43:17 +00:00

voice_handlers_test.go

fix: security hardening, DM auth, LiveKit stability, and voice call timer

2026-03-27 16:14:54 +01:00

voice_join.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

voice_leave.go

feat: implement true E2EE for voice via client-side ECDH key exchange

2026-04-04 19:02:21 +00:00

ws_integration_test.go

fix: resolve 4 server bugs (Phase 1: BUG-085, BUG-087, BUG-090, BUG-091)

2026-04-01 17:52:06 +02:00