From 1a53eb4cc404ec94658fde0ae04cfe2ccf1810dc Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Mon, 10 Aug 2026 03:57:55 +0200 Subject: feat(hub): Phase 8 — Hub v2 security hardening + production readiness MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 8.1 Config-based admin authz (require_admin on all admin endpoints) 8.2 Email encrypted at rest (AES-256-GCM, HKDF from hub Ed25519 key) 8.3 Refresh token rotation with family-based reuse detection 8.4 Federation persistence (HubPeer model replaces in-memory dict) 8.5 Federation token verification now async (DB-backed) 8.6 CSAM hash check wired into swarm registration flow 8.7 Rate limiting on auth endpoints (5/10/20 per minute) 8.8 Healthcheck endpoint (GET /v1/health, no auth) 8.9 IP log cleanup background task (365-day retention) 8.10 Argon2id params bumped to 256 MB (pw_version, rehash on login) Deployed to meshbay.org — schema migrated, existing emails encrypted. 117 tests pass (29 hub, 88 common+node). Resolves security review items S1, S2, S5. Co-Authored-By: Claude Opus 4.6 --- CLAUDE.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) (limited to 'CLAUDE.md') diff --git a/CLAUDE.md b/CLAUDE.md index bd09752..d0c49bd 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -106,19 +106,20 @@ Scope: `hub`, `node`, `common`, or omitted for cross-cutting accesses any group. **Significant (Phase 7-8):** -- **S1** Admin revocation endpoint has no authz check → Phase 8.1 -- **S2** Email stored in plaintext (spec says encrypted at rest) → Phase 8.2 +- **S1** Admin revocation endpoint has no authz check ✅ DONE (Phase 8.1 — config-based require_admin) +- **S2** Email stored in plaintext (spec says encrypted at rest) ✅ DONE (Phase 8.2 — AES-256-GCM, HKDF from hub key) - **S3** jti denylist push via hub→node WebSocket → Phase 7.2 - **S4** AES-GCM keystore IV fixed: 128-bit → 96-bit (NIST SP 800-38D) ✅ DONE -- **S5** Refresh token rotation (one-time use) → Phase 8.3 +- **S5** Refresh token rotation (one-time use) ✅ DONE (Phase 8.3 — family-based reuse detection) **Architecture validated:** crypto primitives, GEK wrapping (ECIES), trust model, key hierarchy, on-the-fly encryption, transport abstraction. ## Known calibration TODOs -- Argon2id `memory_cost`: currently 65536 (64 MB, 78ms) — increase to 262144 (256 MB) before prod - to target ~500ms on typical home server hardware. Implement a `calibrate` CLI command. +- Argon2id `memory_cost`: ✅ DONE — bumped to 262144 (256 MB) in pw_version=2. + Existing v1 users (64 MB) are transparently rehashed on next successful login. + CLI `calibrate` command still TODO for per-hardware tuning. ## NAT traversal — résultats empiriques (demo-v2) -- cgit v1.2.3