Rust FFI's KDF_HKDF path for incoming decryption may use wrong parameters. Pre-derive HKDF(base_key, salt="LKFrameEncryptionKey", info=identity) in Python and pass derived key with KDF_NONE so Rust FFI uses it directly as frame key. Matches EC's MatrixKeyProvider: ratchetWindowSize=10, keyringSize=256. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
19 KiB
19 KiB