Add use_aead field to ChannelSettings

Add bool use_aead = 8 to ChannelSettings message to support optional
AES-CCM authenticated encryption on PSK channels. When enabled,
messages include a 12-byte authentication tag that prevents forgery
and bit-flipping attacks. Defaults to false (standard AES-CTR).

Part of firmware#4030.
This commit is contained in:
Matias Denda 2026-02-25 12:38:55 -03:00
parent 44298d374f
commit b5503a5412

View file

@ -87,6 +87,15 @@ message ChannelSettings {
* Per-channel module settings.
*/
ModuleSettings module_settings = 7;
/*
* Enable authenticated encryption (AES-CCM) for this channel.
* When true, messages include a 12-byte authentication tag that prevents
* forgery and bit-flipping attacks. All nodes on the channel must have
* this enabled unauthenticated (AES-CTR) packets are rejected.
* Experimental. Default: false (standard AES-CTR encryption).
*/
bool use_aead = 8;
}
/*