NAME

Protocol::HAP::Session - encrypted session state for HAP connections

SYNOPSIS

use Protocol::HAP::Session;

my $session = Protocol::HAP::Session->new(id => $id);

# After pair-verify
$session->set_encryption($encrypt_key, $decrypt_key);
$session->set_verified($controller_id);

# Encrypt/decrypt data
my $encrypted = $session->encrypt($plaintext);
my $plaintext = $session->decrypt($encrypted);

DESCRIPTION

This module manages the encrypted session state for HAP connections. It does the ChaCha20-Poly1305 encryption and decryption, with correct nonce management, and it manages the frames. decrypt returns undef on a failed authentication tag, on a truncated frame, or on a frame that declares more than 1024 bytes of plaintext. The caller must then close the connection.

The session holds protocol state only, never a descriptor. The server owns the connection, files it beside the session, and allocates the required id from an instance counter. The id is not the descriptor: the kernel reuses descriptors, session ids never repeat.

The constructor also takes an optional logger argument, defaulting to the null logger of Protocol::HAP.

SEE ALSO

Protocol::HAP, Protocol::HAP::Crypto, spec/HAP-Encryption.md