2 Commits

Author	SHA1	Message	Date
Joseph Doherty	10e2c4ef22	fix(test): use precise InvalidDataException assertion in wrong-key encryption test ... Code quality review feedback: Should.Throw<Exception> was too broad, changed to Should.Throw<InvalidDataException> to match the actual exception type thrown when AEAD decryption fails with wrong key.	2026-02-25 00:51:37 -05:00
Joseph Doherty	f143295392	feat(filestore): wire AeadEncryptor into MsgBlock for at-rest encryption ... Add FileStoreEncryptionTests covering ChaCha20-Poly1305 and AES-GCM round-trips and wrong-key rejection for the FSV2 AEAD path. Fix RestorePayload to wrap CryptographicException from AEAD decryption as InvalidDataException so RecoverBlocks correctly propagates key-mismatch failures instead of silently swallowing them.	2026-02-25 00:43:57 -05:00