Charles N Wyble
3e79064de1
test: add comprehensive encryption parameter validation (FINDING-007)
Previous tests only checked for string presence. Added 16 functional
tests that verify encryption parameters are correctly configured:
Preseed.cfg verification:
- AES-XTS-PLAIN64 cipher configured
- 512-bit keysize configured
- LUKS2 format enabled
- Crypto method for FDE enabled
- Secure disk erasure enabled
encryption-setup.sh verification:
- Cipher configured in crypttab (aes-xts-plain64)
- Key-size configured in crypttab (512)
- dm_crypt module included
- aes_xts module included
- LUKS2 type configured
Documentation accuracy:
- README documents AES-256-XTS cipher
- README documents 512-bit key size
- README documents LUKS2 format
- README documents SHA-512 hash
Integration tests:
- Cipher consistency between preseed and encryption-setup
- Keysize consistency between preseed and encryption-setup
Reference: docs/PRD.md FR-001 (Full Disk Encryption)
Audit: FINDING-007 (2026-02-20)
💘 Generated with Crush
Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-02-20 11:04:22 -05:00
..
2026-02-19 19:39:35 -05:00
2026-02-19 19:39:35 -05:00
2026-02-19 19:39:35 -05:00
2026-01-29 13:29:14 -05:00
2026-02-20 11:04:22 -05:00
2026-02-19 19:39:35 -05:00