369c626ed8
fix(ext): bound covert payload processing
...
Harden LSB extraction against untrusted lengths, insufficient carrier
capacity, truncated payloads, and unbounded stream consumption.
Validate JPEG/EXIF covert framing, configured slot capacity, duplicate
slots, Pack7 lengths, payload completeness, and the one MiB payload
limit.
Add focused boundary and malformed-input tests and document the
incubating JPEG parser trust boundary and accepted residual risk.
2026-07-31 00:09:33 +02:00
54c6c3dd47
fix(ext): harden Piwigo export transport
...
Enforce structurally validated HTTPS endpoints and direct multipart
uploads without generated shell scripts.
Prevent command and multipart-header injection, redact credentials,
clear temporary password copies, and add hostile-input regression
tests.
Correct stale export package JavaDoc references.
2026-07-30 23:18:22 +02:00
49dc080c65
refactor!: consolidate crypto architecture and security model
...
* make ZeroEchoSession the sole policy, audit, and runtime boundary
* replace combined key builders with operation-specific SPI and typed metadata
* remove obsolete pre-release compatibility APIs and global crypto operations
* finalize JCA agreement contexts and replace inheritance with composition
* harden secret lifecycle, key destruction, hybrid KEX, PBKDF2, and audit handling
* standardize PairSeq I/O and introduce immutable validated value types
* migrate app, ext, samples, and required pki integration points
* expand correctness, security, concurrency, and malformed-input coverage
BREAKING CHANGE: removes deprecated pre-release global configuration, legacy
context factories, combined key-builder contracts, String-based password APIs,
unchecked PairSeq writing, BlockGeometry public fields, and other compatibility
facades.
2026-07-28 19:20:30 +02:00
