harald/sanctum
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases 12 Wiki Activity
72 Commits 1 Branch 12 Tags
730393423b27764188d684463b281b789a72eb44
Commit Graph
31 Commits
Author SHA1 Message Date
harald a2c16eda72 test(crypto): M-05 — verify schema equality between standard and hidden vault containers 2026-09-19 09:15:56 +02:00
harald ad9148d867 fix(build): M-02 — enable overflow checks in release profile 2026-09-19 09:12:30 +02:00
harald 52859623c2 fix(vfs): V-03 — raii memory lock guard prevents premature memory unlock on fs clone 2026-09-19 09:10:35 +02:00
harald f9733dfc73 fix(storage): S-06 — container advisory lock prevents parallel mount and concurrent writes 2026-09-19 09:05:12 +02:00
harald 9634beb744 fix(sync): S-05 — delete and shred all chunks when truncating to 0 bytes 2026-09-19 08:59:00 +02:00
harald f557a9ddfa fix(sync): S-04 — eliminate TOCTOU by recording actual bytes written 2026-09-19 08:57:34 +02:00
harald 888c86ca5e fix(sync): S-03 — symlink detection and cycle protection 2026-09-19 08:56:43 +02:00
harald 7b0f061221 fix(sync): S-02 — platform-independent path construction avoids path traversal 2026-09-19 01:01:09 +02:00
harald bdddd812ac fix(crypto): K-03 — emergency card persistence warning and rekey command 2026-09-19 00:58:39 +02:00
harald 36a4094336 fix(crypto): K-02 — format v3 chunk replay protection with generation aad 2026-09-19 00:52:13 +02:00
harald ad531d8393 fix(crypto): K-01 — format v3 canonical metadata authentication 2026-09-19 00:26:27 +02:00
harald 151fdba09d fix(vfs): V-01 — copy dispatches to CarrierFs in carrier mode 2026-09-19 00:16:04 +02:00
harald 533764487a fix(vfs): V-02 — missing chunk within expected file size causes error instead of silent truncation 2026-09-19 00:13:43 +02:00
harald 374150e5b3 fix(sync): S-01 — excluded paths no longer deleted by --delete 2026-09-19 00:12:14 +02:00
harald fba7f305e3 release: v0.7.2 — Security Audit Remediation (SA-01 bis SA-07)
Sanctum Release / Build & Test (Windows x86_64) (push) Waiting to run
Details
Sanctum Release / Sign & Release (push) Blocked by required conditions
Details 
- SA-01: Container-DoS / KDF-Amplification Schutz mit Pre-KDF Validierung, max 2 Slots (nur 0 und 1), Slot 0 Pflicht und strikten BLOB-Laengen
- SA-02: Release-Signierung in CI entkoppelt (getrennte build und sign-and-release Jobs, Secret-Isolation)
- SA-03: Pinned Download-Integritaet fuer minisign.exe in CI via SHA-256
- SA-04: Immutable Action-Pinning (@sha) und Toolchain-Pinning (1.85.0) in CI
- SA-05: Session-Token vollstaendig aus URIs verbannt (403 Forbidden bei Vorkommen im Pfad/Query)
- SA-06: Constant-Time Token- und Auth-Vergleiche via subtle::ConstantTimeEq
- SA-07: Dokumentations-Klarstellung bzgl. logischem Shredding vs. physischer SSD/FTL/CoW-Persistenz
 2026-09-18 23:40:35 +02:00
harald 1cdb30147b release: v0.7.1 — Security-Patch (R-01 bis R-06)
Sanctum Release / Build & Release (Windows x86_64) (push) Waiting to run
Details 
- R-01: Bereinigung verbliebener Restbehauptungen in Doku und Code (LEGAL.md, README.md, QUICKSTART.md, main.rs, crypto/storage/recovery/verify.rs)
- R-02: Lückenloser Carrier-Schutz in SanctumFs::copy (Quelle & Ziel) und sync (Pull-Skip & Push-Schutz)
- R-03: Shared Dateinamen-Validierung (validate_node_name) in pathutil.rs, durchgesetzt in storage.rs und vfs.rs
- R-04: Fail-closed Release-Packaging & obligatorische Minisign-Signatur in CI (.gitea/workflows/release.yaml) und Scripts
- R-05: Session-Token Beseitigung im argv: In-Process Win32 WNetAddConnection2W/WNetCancelConnection2W, kein gio argv-Token, Multi-Auth HTTP Middleware (Basic Auth, X-Sanctum-Token, Path-Fallback) mit 401 WWW-Authenticate
- R-06: Sofortiges Löschen von SANCTUM_RECOVERY_KEY aus der Prozessumgebung
 2026-09-18 19:49:38 +02:00
harald 436790abf0 feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)
Sanctum Release / Build & Release (Windows x86_64) (push) Waiting to run
Details
2026-09-18 19:12:43 +02:00
harald 2e4cf1cef0 feat(upgrade): implement in-place self-upgrade command and bump version to v0.6.0 2026-09-16 12:33:57 +02:00
harald aa65d96434 feat(sync): add rsync-like sync command with dry-run and bump version to v0.5.0 2026-09-16 10:40:38 +02:00
harald 46f976b353 feat(cross-platform): add QUICKSTART.md, live crash test, and platform abstraction module 2026-09-10 16:31:57 +02:00
harald 70d03df676 fix(security): implement P3 high-entropy carrier default and P5 manifest capacity guard 2026-09-09 21:33:01 +02:00
harald 771c08ff0f fix(security): implement P1 loopback session token, P2 AAD filename binding, and P4 memory zeroization 2026-09-09 21:24:07 +02:00
harald 98bfac718f fix(core): resolve all 12 adversarial review findings 
- Zeroize passwords in CLI prompts, handlers, and mount authentication
- Preserve carrier_node_id when recovering Slot 0 via recovery key
- Add --slot parameter to restore-header for targeted slot recovery
- Implement online_backup and restore_from_backup using SQLite Online Backup API
- Expose 'sanctum backup' and 'sanctum restore' CLI subcommands
- Fix inactivity auto-lock by removing touch() from PROPFIND metadata/read_dir
- Support O_APPEND by setting file cursor to file size on handle creation
- Prevent data loss by implementing Drop for CarrierFile to flush dirty blocks
- Optimize CSPRNG padding to only fill unwritten slack space
- Batch carrier initialization in 500-block transactions to prevent UI/CLI freeze
- Enforce 64-byte savings threshold for LZ4 compression
- Add WebClient service diagnostic hint for Windows net use mount errors
- Add unit and integration tests covering all new features
 2026-09-09 21:02:21 +02:00
harald 030ce6a1e5 feat(security): implement Phase 2 Modell A (Steganografischer Alibi-Carrier für Plausible Deniability) 2026-09-09 20:22:00 +02:00
harald b8e4dcb614 feat(security): implement Phase 1 of Plausible Deniability hardening 2026-09-09 19:55:34 +02:00
harald 1e6854e9f5 feat(anti-forensics): implement incremental auto-vacuum, chunk shredding, and plausible deniability 2026-09-08 10:46:24 +02:00
harald 2cb065c8c0 feat(opsec): implement inactivity auto-lock, session lock detection, and anti-leak shield 2026-09-08 10:14:31 +02:00
harald 1c8a860184 feat(recovery): implement header backup/restore, BIP-39 recovery key, and integrity verification 2026-09-08 09:49:08 +02:00
harald 2d14c64c3e feat(compression): implement transparent LZ4 chunk compression with V1 backwards compatibility 2026-09-07 21:59:42 +02:00
harald a9c3dd25a3 feat(cli): add passwd command for instant master password changes 2026-09-07 17:29:50 +02:00
harald 9115596763 Initial commit: Sanctum encrypted single-file container for Windows 2026-09-07 15:40:58 +02:00