feat: AES-256-GCM message encryption with send/receive enforcement (#2643)#2644

Merged

jeremydmiller merged 21 commits intoJasperFx:mainfrom

BlackChepo:feature/Message_Encryption

May 1, 2026

Commits on Apr 30, 2026

feat(encryption): add foundation types for AES-256-GCM message encryption
BlackChepo
committed
feat(encryption): add EncryptingMessageSerializer (AES-256-GCM)
BlackChepo
committed
feat(encryption): add UseEncryption / per-type / per-endpoint configuration
BlackChepo
committed
test(encryption): add end-to-end and receive-side error acceptance tests
BlackChepo
committed
docs(encryption): add EncryptionDemo sample and Vitepress guide page
BlackChepo
committed
docs(encryption): clarify configuration order and per-endpoint prerequisite
BlackChepo
committed
feat(encryption): add BuildAad helper for AEAD associated-data binding
BlackChepo
committed
feat(encryption): bind MessageType/KeyId/InnerContentType into AES-GCM tag
BlackChepo
committed
feat(encryption): receive-side encryption-required state
BlackChepo
committed
feat(encryption): receive-side enforcement for required encryption
BlackChepo
committed
docs(encryption): document receive-side enforcement, RequireEncryption()
BlackChepo
committed
fix(encryption): listener guard works on every transport, not just TCP/Local
BlackChepo
committed
fix(encryption): order-insensitive setup, startup-time validation, doc honesty
BlackChepo
committed
fix(encryption): isolate per-caller cancellation, bound cache, defensive-copy keys
BlackChepo
committed
fix(encryption): close receive-side subtype bypass with polymorphic guard
BlackChepo
committed
fix(encryption): close three configuration hazards and harden test isolation
BlackChepo
committed
test(encryption): sharpen audit-surfaced weak tests
BlackChepo
committed
fix(encryption): harden edge cases and add coverage for residual paths
BlackChepo
committed
test(encryption): add wire-bytes negative test and durable-persistence contract
BlackChepo
committed
fix(encryption): tighten public surface, drop fallbacks, harden defenses
BlackChepo
committed
test(encryption): resolve IMessageBus via host.MessageBus() helper
BlackChepo
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: AES-256-GCM message encryption with send/receive enforcement (#2643)#2644

feat: AES-256-GCM message encryption with send/receive enforcement (#2643)#2644
jeremydmiller merged 21 commits intoJasperFx:mainfrom
BlackChepo:feature/Message_Encryption

Commits on Apr 30, 2026

feat(encryption): add foundation types for AES-256-GCM message encryption

feat(encryption): add EncryptingMessageSerializer (AES-256-GCM)

feat(encryption): add UseEncryption / per-type / per-endpoint configuration

test(encryption): add end-to-end and receive-side error acceptance tests

docs(encryption): add EncryptionDemo sample and Vitepress guide page

docs(encryption): clarify configuration order and per-endpoint prerequisite

feat(encryption): add BuildAad helper for AEAD associated-data binding

feat(encryption): bind MessageType/KeyId/InnerContentType into AES-GCM tag

feat(encryption): receive-side encryption-required state

feat(encryption): receive-side enforcement for required encryption

docs(encryption): document receive-side enforcement, RequireEncryption()

fix(encryption): listener guard works on every transport, not just TCP/Local

fix(encryption): order-insensitive setup, startup-time validation, doc honesty

fix(encryption): isolate per-caller cancellation, bound cache, defensive-copy keys

fix(encryption): close receive-side subtype bypass with polymorphic guard

fix(encryption): close three configuration hazards and harden test isolation

test(encryption): sharpen audit-surfaced weak tests

fix(encryption): harden edge cases and add coverage for residual paths

test(encryption): add wire-bytes negative test and durable-persistence contract

fix(encryption): tighten public surface, drop fallbacks, harden defenses

test(encryption): resolve IMessageBus via host.MessageBus() helper