mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 08:14:42 +00:00
Johnathan Corgan
1adfd9e90f
Include target_coords in proof_bytes() signed data to prevent transit nodes from substituting fake coordinates. Add mandatory signature verification at the originator using the target's public key from identity_cache (guaranteed available since lookups are only initiated from contexts where the key is already cached). Verification failure discards the response. Identity cache miss (should never happen) logs an error and discards. Add four new tests covering verification success, failure, cache miss, and coordinate substitution detection.