Charles N Wyble 3e79064de1 test: add comprehensive encryption parameter validation (FINDING-007) ...

Previous tests only checked for string presence. Added 16 functional
tests that verify encryption parameters are correctly configured:

Preseed.cfg verification:
- AES-XTS-PLAIN64 cipher configured
- 512-bit keysize configured
- LUKS2 format enabled
- Crypto method for FDE enabled
- Secure disk erasure enabled

encryption-setup.sh verification:
- Cipher configured in crypttab (aes-xts-plain64)
- Key-size configured in crypttab (512)
- dm_crypt module included
- aes_xts module included
- LUKS2 type configured

Documentation accuracy:
- README documents AES-256-XTS cipher
- README documents 512-bit key size
- README documents LUKS2 format
- README documents SHA-512 hash

Integration tests:
- Cipher consistency between preseed and encryption-setup
- Keysize consistency between preseed and encryption-setup

Reference: docs/PRD.md FR-001 (Full Disk Encryption)
Audit: FINDING-007 (2026-02-20)

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>

2026-02-20 11:04:22 -05:00

4.9 KiB

Raw Permalink Blame History

View Raw