meshbay.git/packages/meshbay-common/tests/test_keyderive.py, branch 0.13MeshBay — read-only public mirrorhttps://git.meshbay.org/meshbay.git/atom?h=0.132026-08-09T12:50:22Zfeat: password-based key derivation + operational QUICKSTART2026-08-09T12:50:22ZChristophe Bessoncbesson@gmail.com2026-08-09T12:50:22Zurn:sha1:aed220d9f0bab42efd57b56851319e840ab8ae26
keyderive.py: derive Ed25519+X25519 from username+password via Argon2id.
Same credentials → same keys on any device. Encrypt/decrypt keypair
bundle (AES-256-GCM) for hub storage (web clients).
7/7 tests. Full suite: 81/81.
keyderive.js: browser counterpart using PBKDF2-SHA512 + random keypairs
encrypted for hub storage. Avoids algorithm mismatch with Python.
hub/models.py + users.py: keypair_bundle field added to User, stored on
registration, returned in login response for web client key recovery.
QUICKSTART.md: fully rewritten. 3 operational scripts in QE/demo-v1/:
setup_demo.py — create accounts, group, distribute GEK
run_node.py — start HTTP node (watches shared/ directory)
download.py — bob login → GEK fetch → decrypt → save
All tested locally end-to-end. No invented URLs.
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>