Mudr-209

/* AES‑GCM‑256 encryption + authentication tag */ aes_gcm_encrypt(SE_KEY_LOG, record_buf, sizeof(mudr209_hdr_t)+hdr->payload_sz, record_buf); // in‑place encrypt

flash_append(record_buf, sizeof(mudr209_hdr_t)+hdr->payload_sz); MUDR-209

/* Compute CRC over header+payload (excluding CRC field) */ hdr->crc32 = crc32_compute(record_buf, sizeof(mudr209_hdr_t) + len); // in‑place encrypt flash_append(record_buf

/* 3. Encrypt & MAC ----------------------------------------------------------*/ static void protect_record(void) crc32 = crc32_compute(record_buf