git.iko.soy/skrepka
on master help sign in
history ofcore/src/crypto.rs
all commits
82eae7cFix profile photo clearing on absent field, remove dead code in padded_len, fix CI comment typoLancelot 850d68dsecurity audit fixes: 35 findings across core, shell, server, specLancelot ee54351Security audit 13th pass: fix 23 findings across crypto, server, clientLancelot 3258116Security: add AAD to AEAD (v0x02), fix livelock, bound dedup, cap gossip amplificationiko 11c24d8Security audit fixes: Q16 cursor poisoning, Q17 ack ordering, Q18 persistent seen_ids, Q25 malformed JSON, Q35 revokeOthers challenges, Q37 sig inside atomic, Q38 audit log, Q49 low-order X25519 check, spec gaps Q39-Q44, §10 risk table updatesLancelot da51700Security audit Q1-Q9: zstd window cap, poll event/body caps, cursor clamp, verify_strict, TEST-NET-2, cursor watchdog, cached X25519 keys, base64 photo validationLancelot c24f528Seventh-pass audit: zeroize encrypt inner on AEAD failure, fix stale commentsiko 4e03722Sixth-pass audit: send-side body/profile/nickname length checks, zeroize Decrypted plaintext, send watchdogiko f34323cFifth-pass audit: fix send_text contact-cap ordering, spec version-byte omissions, zstd level, DeleteContact UI, comment mismatchiko 92e93f0Fourth-pass audit: zeroize decrypt intermediates, fix dead poll loop, clamp ts lower bound, enforce MAX_CONTACTS in send_text, profile-before-text ordering, ack_ids post-filter count check, fix §4 Blocking speciko b8d30b6Third-pass audit: fix cursor-loss, block-check, zeroization, spec driftiko aaf961acrypto: use is_multiple_of in the padding-bucket assertioniko b0ffcd8Add length padding to encrypted blobsiko 5477c47Comprehensive bug fix pass: crypto, state machine, FFI, server, Apple shelliko 91b7b58Add iOS client: Rust/Crux core + SwiftUI shell with crypto, messaging, auth, profiles, QR scanning2026.06.25.0917iko