9 Commits

Include renames

Author	SHA1	Message	Date
harald	bdddd812ac	fix(crypto): K-03 — emergency card persistence warning and rekey command	2026-09-19 00:58:39 +02:00
harald	36a4094336	fix(crypto): K-02 — format v3 chunk replay protection with generation aad	2026-09-19 00:52:13 +02:00
harald	fba7f305e3	release: v0.7.2 — Security Audit Remediation (SA-01 bis SA-07) ... - SA-01: Container-DoS / KDF-Amplification Schutz mit Pre-KDF Validierung, max 2 Slots (nur 0 und 1), Slot 0 Pflicht und strikten BLOB-Laengen - SA-02: Release-Signierung in CI entkoppelt (getrennte build und sign-and-release Jobs, Secret-Isolation) - SA-03: Pinned Download-Integritaet fuer minisign.exe in CI via SHA-256 - SA-04: Immutable Action-Pinning (@sha) und Toolchain-Pinning (1.85.0) in CI - SA-05: Session-Token vollstaendig aus URIs verbannt (403 Forbidden bei Vorkommen im Pfad/Query) - SA-06: Constant-Time Token- und Auth-Vergleiche via subtle::ConstantTimeEq - SA-07: Dokumentations-Klarstellung bzgl. logischem Shredding vs. physischer SSD/FTL/CoW-Persistenz	2026-09-18 23:40:35 +02:00
harald	1cdb30147b	release: v0.7.1 — Security-Patch (R-01 bis R-06) ... - R-01: Bereinigung verbliebener Restbehauptungen in Doku und Code (LEGAL.md, README.md, QUICKSTART.md, main.rs, crypto/storage/recovery/verify.rs) - R-02: Lückenloser Carrier-Schutz in SanctumFs::copy (Quelle & Ziel) und sync (Pull-Skip & Push-Schutz) - R-03: Shared Dateinamen-Validierung (validate_node_name) in pathutil.rs, durchgesetzt in storage.rs und vfs.rs - R-04: Fail-closed Release-Packaging & obligatorische Minisign-Signatur in CI (.gitea/workflows/release.yaml) und Scripts - R-05: Session-Token Beseitigung im argv: In-Process Win32 WNetAddConnection2W/WNetCancelConnection2W, kein gio argv-Token, Multi-Auth HTTP Middleware (Basic Auth, X-Sanctum-Token, Path-Fallback) mit 401 WWW-Authenticate - R-06: Sofortiges Löschen von SANCTUM_RECOVERY_KEY aus der Prozessumgebung	2026-09-18 19:49:38 +02:00
harald	436790abf0	feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)	2026-09-18 19:12:43 +02:00
harald	98bfac718f	fix(core): resolve all 12 adversarial review findings ... - Zeroize passwords in CLI prompts, handlers, and mount authentication - Preserve carrier_node_id when recovering Slot 0 via recovery key - Add --slot parameter to restore-header for targeted slot recovery - Implement online_backup and restore_from_backup using SQLite Online Backup API - Expose 'sanctum backup' and 'sanctum restore' CLI subcommands - Fix inactivity auto-lock by removing touch() from PROPFIND metadata/read_dir - Support O_APPEND by setting file cursor to file size on handle creation - Prevent data loss by implementing Drop for CarrierFile to flush dirty blocks - Optimize CSPRNG padding to only fill unwritten slack space - Batch carrier initialization in 500-block transactions to prevent UI/CLI freeze - Enforce 64-byte savings threshold for LZ4 compression - Add WebClient service diagnostic hint for Windows net use mount errors - Add unit and integration tests covering all new features	2026-09-09 21:02:21 +02:00
harald	b8e4dcb614	feat(security): implement Phase 1 of Plausible Deniability hardening	2026-09-09 19:55:34 +02:00
harald	1e6854e9f5	feat(anti-forensics): implement incremental auto-vacuum, chunk shredding, and plausible deniability	2026-09-08 10:46:24 +02:00
harald	1c8a860184	feat(recovery): implement header backup/restore, BIP-39 recovery key, and integrity verification	2026-09-08 09:49:08 +02:00