https://gitlab.synchro.net/main/sbbs/-/commit/6e15770170358b48ee6afe82
Modified Files:
src/ssh/CLAUDE.md CMakeLists.txt src/ssh/kex/curve25519-sha256.c dh-gex-sha256.c src/ssh/ssh-internal.h src/ssh/test/dssh_test_internal.h dssh_test_ossl.c test_algo_key.c test_alloc.c
Log Message:
Branch coverage tests: 9 of 12 files at 100%, overall 92.5%

New targeted tests for ssh.c, dh-gex-sha256.c, curve25519-sha256.c, ssh-ed25519.c, rsa-sha2-256.c, and aes256-ctr.c — all now at 100%
branch coverage. Added ossl injection redirects for BN_rand, EVP_PKEY_CTX_set_rsa_padding, and EVP_CIPHER_CTX_set_padding.
Exposed kex handlers as DSSH_TESTABLE for direct unit testing.

Split all layer/integration tests into individual CTest processes
(one per test × env variant) to eliminate shared global state
contamination. 2149 CTest entries, same ~23s wall time with -j8.

Updated CLAUDE.md to clarify that DSSH_TESTING defense-in-depth
guards are only for impossible states in DeuceSSH's own code;
external function failures must always be tested.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---
￭ Synchronet ￭ Vertrauen ￭ Home of Synchronet ￭ [vert/cvs/bbs].synchro.net