Understand what the digest checks.

Corruption detection (unkeyed)

The unkeyed SHA-256 digest is a check for accidental corruption of the record's first 104 bytes (bytes 0–103). In the exhaustive single-bit test it detected 1,082 of 1,088 flips; the 6 exceptions are documented ±0.0 sign flips. It does not protect against deliberate changes, because anyone can recompute it.

AEA does not navigate, dead-reckon, detect or bound drift, authenticate senders, reject spoofed packets, provide electronic warfare or anti-spoofing capabilities, save propellant, or detect SEUs.

AEA-AUTH/1 is a planned future profile for keyed signing. It is not built and is not part of the current library.

If an integration requires proof of origin, it needs a separately reviewed signed or keyed outer transport. AEA alone does not provide it.

Report an issue

Send a reproducible description of a website or reference-library issue via the Contact page. Include the affected page or source revision, expected behavior and steps to reproduce.

This website is a static publication. No security certification or independent conformance assessment is claimed.