derive
Returns a rolling 8-character hex token that proves the caller knows the swarm PIN without revealing it on the wire — used in multicast beacons to filter out devices that belong to a different swarm.
Construction:
nodeKey = HMAC-SHA256(nodeUuid, pin)— binds the token to a specific server's UUID so a leaked beacon can't be replayed against another server in the same LAN.window = epochSeconds / TOTP_WINDOW_SECONDS— quantises time into 30-second buckets so the token rotates and old captures expire.token = first 4 bytes of
HMAC-SHA256(nodeKey, window)as hex.
Returns a rolling 8-character hex token that proves the caller knows the swarm PIN without revealing it on the wire — used in multicast beacons to filter out devices that belong to a different swarm.
Construction:
nodeKey = HMAC-SHA256(nodeUuid, pin)— binds the token to a specific server's UUID so a leaked beacon can't be replayed against another server in the same LAN.window = epochSeconds / TOTP_WINDOW_SECONDS— quantises time into 30-second buckets so the token rotates and old captures expire.token = first 4 bytes of
HMAC-SHA256(nodeKey, window)as hex.
Returns a rolling 8-character hex token that proves the caller knows the swarm PIN without revealing it on the wire — used in multicast beacons to filter out devices that belong to a different swarm.
Construction:
nodeKey = HMAC-SHA256(nodeUuid, pin)— binds the token to a specific server's UUID so a leaked beacon can't be replayed against another server in the same LAN.window = epochSeconds / TOTP_WINDOW_SECONDS— quantises time into 30-second buckets so the token rotates and old captures expire.token = first 4 bytes of
HMAC-SHA256(nodeKey, window)as hex.
Returns a rolling 8-character hex token that proves the caller knows the swarm PIN without revealing it on the wire — used in multicast beacons to filter out devices that belong to a different swarm.
Construction:
nodeKey = HMAC-SHA256(nodeUuid, pin)— binds the token to a specific server's UUID so a leaked beacon can't be replayed against another server in the same LAN.window = epochSeconds / TOTP_WINDOW_SECONDS— quantises time into 30-second buckets so the token rotates and old captures expire.token = first 4 bytes of
HMAC-SHA256(nodeKey, window)as hex.
Returns a rolling 8-character hex token that proves the caller knows the swarm PIN without revealing it on the wire — used in multicast beacons to filter out devices that belong to a different swarm.
Construction:
nodeKey = HMAC-SHA256(nodeUuid, pin)— binds the token to a specific server's UUID so a leaked beacon can't be replayed against another server in the same LAN.window = epochSeconds / TOTP_WINDOW_SECONDS— quantises time into 30-second buckets so the token rotates and old captures expire.token = first 4 bytes of
HMAC-SHA256(nodeKey, window)as hex.