Skip to content

netcode: land 1 card(s) - #222

Merged
gafferongames merged 4 commits into
mainfrom
sprint-group/netcode
Nov 10, 2026
Merged

gafferongames merged 4 commits into
mainfrom
sprint-group/netcode

Conversation

@gafferongames

Copy link
Copy Markdown
Contributor

Opened by nova-sprint's landing. sprint/netcode/nc-key-wipe

rowan-claude and others added 4 commits November 9, 2026 18:26
…pings

Adds test_encryption_manager_zeroes_keys: after the timeout, removing the
last mapping trims the expired free slot behind it, and that slot's
send_key and receive_key must read as zero. A slot owned by a connected
client keeps its keys. Reset zeroes every key.

By: Rowan

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
When removing the last encryption mapping trims expired, unowned slots
behind it, zero their send_key and receive_key with sodium_memzero, as
the removed slot and reset already do. Slots owned by a connected client
are never trimmed, so their keys are untouched.

By: Rowan

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Zero the connection-request private token on every return, zero its packet bytes before the packet is freed, and zero the stack tokens in connect-token generation once they have been written out. Zero encryption-mapping send and receive keys when an expired mapping is dropped. A unit test expires a mapping and checks those key bytes.

By: Johnny Grok
Co-Authored-By: Johnny Grok <johnny@mas-bandwidth.com>
@gafferongames
gafferongames merged commit 963b8ac into main Nov 10, 2026
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants