{
  "version": "shade-storage-v1",
  "description": "At-rest storage encryption test vectors. Cross-implementation parity check for V3.2 (TS) and V3.5 (Android).",
  "kdf": {
    "scrypt": {
      "passphrase": "correct-horse-battery-staple",
      "salt_hex": "00112233445566778899aabbccddeeff",
      "N": 1024,
      "r": 8,
      "p": 1,
      "dkLen": 32,
      "expected_master_key_hex": "aee2dc14f3a46c563f8906a9c8777f167c868dc06015a983fdf2dbba078a3597"
    },
    "hkdf_storage_key": {
      "info": "shade-storage-v1",
      "master_key_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20",
      "expected_storage_key_hex": "059a250e15aa02952ab977f441e217cfcd4a6d9be8b51cf93d001a90eeb6accc"
    },
    "hkdf_field_key": {
      "info_template": "shade-field-v1:{table}:{column}",
      "storage_key_hex_filled_with": "ab",
      "expected_field_key_hex_for_sessions_session": "cbe428b4e8be2d7c4cd707dbac7e02881f2da34ee5b00bdc9bc1ebf2f096087a",
      "samples": [
        { "table": "sessions",          "column": "session" },
        { "table": "identity",          "column": "identity" },
        { "table": "trusted_identities","column": "trusted_identity" }
      ]
    },
    "deterministic_nonce": {
      "info_template": "shade-row-nonce-v1:{table}:{pk}",
      "row_key_hex_filled_with": "cd",
      "expected_nonce_hex_for_sessions_alice": "f72f291a2d3cd0ba652b60c5",
      "samples": [
        { "table": "sessions", "pk": "alice" },
        { "table": "sessions", "pk": "bob"   },
        { "table": "identity", "pk": "1"     }
      ]
    }
  },
  "aead": {
    "algorithm": "AES-256-GCM",
    "wire_format": "nonce(12) || ciphertext || tag(16)",
    "aad_template": "shade-aad-v1|{table}|{column}|{pk}",
    "round_trips": [
      {
        "table": "sessions",
        "column": "session",
        "pk": "alice",
        "plaintext_utf8": "{\"rootKey\":\"AAAA\"}"
      },
      {
        "table": "identity",
        "column": "identity",
        "pk": "1",
        "plaintext_utf8": "{\"signingPublicKey\":\"BBBB\"}"
      }
    ]
  },
  "_note": "Fields marked RUNTIME are computed by the test harness in packages/shade-storage-encrypted/tests/test-vectors.test.ts. Android (V3.5) consumes the same JSON and must produce byte-identical KDF outputs."
}