5 Commits

Include renames

Author	SHA1	Message	Date
Matthew Jackson	e308c5b825	aacs/types: redact Debug for all key-bearing types (test-guarded) ... DeviceKey/HostCert/Vid/MediaKey/Vuk/ProcessingKey/UnitKey/DiscEntry carried key material on #[derive(Debug)] — a stray {:?} would leak device/host-private/media/ volume/unit keys. Manual Debug impls print shape only. redaction_tests asserts no key bytes appear and a redaction marker is present (fails if a derive returns).	2026-07-17 20:56:38 -07:00
Matthew Jackson	edc60582ec	FMTS: resolve the index key map from one forensic keyserver query ... The keyserver protocol now returns all 32 index keys as an array for a forensic content sample (and a single-element array for plain content). resolve_fmts_key_map sends one forensic batch and maps array element i to segment index i+1, replacing the per-index blind-probe collection loop that repeatedly hit the key service. Segment/index parsing and the aligned-unit content classification are reworked to support this: - rename variant_select -> index_select (per-index, not per-variant) - content classification moves to is_clean(buf, ContentFormat) so the unit selector emits only units the key service accepts - segment.rs: parse IndividualSegment.tbl index tags + SPN ranges, build contiguous LBA key ranges from the resolved 32-key array - decrypt/decorator plumbing for the resolved per-index keys Fail loud (FmtsKeyMissing) when the forensic query returns < 32 keys or any segment index stays unresolved.	2026-07-16 19:41:44 -07:00
Matthew Jackson	43cbfa07f5	1.3.2: AACS 2.1 FMTS variant-decode foundation ... Add UnitKey.variant_number (0 = ordinary, 1..32 = forensic variant) with new/variant constructors, and aacs::variant_select — resolve a disc's single variant and classify each aligned unit (default / variant / drop foreign / conceal keyless). Correct IndividualSegment.tbl: the per-record field is the variant (cycles 1..32 on a retail disc), not a segment number — Segment.number -> Segment.variant.	2026-07-10 14:00:28 -07:00
Matthew Jackson	122a03b23d	aacs: remove boil veneer; move key newtypes to aacs::types ... aacs::boil was a thin newtype veneer over aacs::derive — a duplicate layer. Delete it: move the shared key newtypes (Vid, MediaKey, Vuk, ProcessingKey, UnitKey) into aacs::types, and expose resolve_candidate + KeyCandidate from aacs::derive directly. Downstream (keysource, disc::encrypt) now import from aacs::{derive,types}. Pure API consolidation, no behaviour change; full test suite green on Rust 1.86.	2026-07-05 12:09:39 -07:00
Matthew Jackson	decb87a250	AACS pipeline reshape + TrueHD metadata + central consts + clippy/fmt clean ... - AACS: delete in-lib keydb parser (Step 3); boil-down primitives (mk_from_dk/vuk_from_mk/uk_from_vuk) + newtypes; KeySource->get_uk(ctx)+ ResolveCtx; Unlocker->unlock()->Result<Vid,UnlockError> + AacsCertUnlocker; OEM bus-key gate (AacsBusKeyUnavailable); structured ResolutionTrace (Step 4). - TrueHD: sample-rate from major-sync, Atmos label, 44.1k AU duration. - consts: central media/format constants module; 17 duplicate const-defs centralized (sector/TS-packet/source-packet); mpls stream-entry + category codes named. - clippy --all-targets -D warnings clean (1.86); fmt clean; 2199 lib tests.	2026-06-26 12:19:24 -07:00