NAME

Protocol::HAP::Session - encrypted session state for HAP connections

SYNOPSIS

    use Protocol::HAP::Session;
    my $session = Protocol::HAP::Session->new(id => $id);
    # After pair-verify
    $session->set_encryption($encrypt_key, $decrypt_key);
    $session->set_verified($controller_id);
    # Encrypt/decrypt data
    my $encrypted = $session->encrypt($plaintext);
    my $plaintext = $session->decrypt($encrypted);

DESCRIPTION

This module manages the encrypted session state for HAP connections. It does the ChaCha20-Poly1305 encryption and decryption, with correct nonce management, and it manages the frames. "decrypt" returns undef on a failed authentication tag, on a truncated frame, or on a frame that declares more than 1024 bytes of plaintext. The caller must then close the connection.

The session holds protocol state only, never a descriptor. The server owns the connection, files it beside the session, and allocates the required "id" from an instance counter. The id is not the descriptor: the kernel reuses descriptors, session ids never repeat.

The constructor also takes an optional "logger" argument, defaulting to the null logger of Protocol::HAP.

SEE ALSO

Protocol::HAP, Protocol::HAP::Crypto, spec/HAP-Encryption.md