Diagnostic: if Rust FFI HKDF produces different result than EC JS HKDF, set_key(caller) would always fail (DEC_FAILED). Test: pre-derive AES key in Python matching livekit-client-sdk-js params (SHA-256, salt=LKFrameEncryptionKey, info=128-zeros, 16-byte output), pass to set_shared_key() which stores raw (no KDF). If user→bot decryption now works, root cause = Rust HKDF mismatch. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
20 KiB
20 KiB