78 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
harald	78a9c233f8	fix(upgrade): U-01 — enforce pre-hashed minisign verification	2026-09-19 09:41:29 +02:00
harald	c7c0ed85f5	fix(sync): S-09 — pull overwrite protection and conflict safety	2026-09-19 09:40:00 +02:00
harald	92db21d47e	fix(sync): S-08 — document and refine glob matching in sync engine	2026-09-19 09:33:57 +02:00
harald	15adf79f48	fix(sync): S-07 — skip invalid windows filenames with files_skipped_invalid counter	2026-09-19 09:31:25 +02:00
harald	1ba67cc9e2	fix(storage): V-09 — ensure truncate chunks after shreds data blocks before deletion	2026-09-19 09:24:30 +02:00
harald	708da24d91	fix(vfs): V-08 — disallow tab control character in validate path safety	2026-09-19 09:22:46 +02:00
harald	730393423b	fix(vfs): V-07 — rfc-4918 destination overwrite semantics and directory conflict check in copy	2026-09-19 09:21:16 +02:00
harald	e300a764c9	fix(vfs): V-06 — sparse writes zero-fill gaps between previous end of file and seek offset	2026-09-19 09:19:56 +02:00
harald	17ac4f9358	fix(vfs): V-05 — log flush failure as error in sanctum file drop and ensure flush on close	2026-09-19 09:17:49 +02:00
harald	a2c16eda72	test(crypto): M-05 — verify schema equality between standard and hidden vault containers	2026-09-19 09:15:56 +02:00
harald	e496c418c5	doc(security): M-04 — document session token threat model in userland context	2026-09-19 09:15:05 +02:00
harald	2af14eef36	fix(mount): M-03 — output webdav credentials and manual mount instructions for linux	2026-09-19 09:14:18 +02:00
harald	ad9148d867	fix(build): M-02 — enable overflow checks in release profile	2026-09-19 09:12:30 +02:00
harald	a502845662	fix(crypto): M-01 — increase argon2id default parameters to 256 mib and 4 iterations	2026-09-19 09:12:04 +02:00
harald	52859623c2	fix(vfs): V-03 — raii memory lock guard prevents premature memory unlock on fs clone	2026-09-19 09:10:35 +02:00
harald	f9733dfc73	fix(storage): S-06 — container advisory lock prevents parallel mount and concurrent writes	2026-09-19 09:05:12 +02:00
harald	9634beb744	fix(sync): S-05 — delete and shred all chunks when truncating to 0 bytes	2026-09-19 08:59:00 +02:00
harald	f557a9ddfa	fix(sync): S-04 — eliminate TOCTOU by recording actual bytes written	2026-09-19 08:57:34 +02:00
harald	888c86ca5e	fix(sync): S-03 — symlink detection and cycle protection	2026-09-19 08:56:43 +02:00
harald	7b0f061221	fix(sync): S-02 — platform-independent path construction avoids path traversal	2026-09-19 01:01:09 +02:00
harald	bdddd812ac	fix(crypto): K-03 — emergency card persistence warning and rekey command	2026-09-19 00:58:39 +02:00
harald	36a4094336	fix(crypto): K-02 — format v3 chunk replay protection with generation aad	2026-09-19 00:52:13 +02:00
harald	ad531d8393	fix(crypto): K-01 — format v3 canonical metadata authentication	2026-09-19 00:26:27 +02:00
harald	151fdba09d	fix(vfs): V-01 — copy dispatches to CarrierFs in carrier mode	2026-09-19 00:16:04 +02:00
harald	533764487a	fix(vfs): V-02 — missing chunk within expected file size causes error instead of silent truncation	2026-09-19 00:13:43 +02:00
harald	374150e5b3	fix(sync): S-01 — excluded paths no longer deleted by --delete	2026-09-19 00:12:14 +02:00
harald	fba7f305e3	release: v0.7.2 — Security Audit Remediation (SA-01 bis SA-07) ... - SA-01: Container-DoS / KDF-Amplification Schutz mit Pre-KDF Validierung, max 2 Slots (nur 0 und 1), Slot 0 Pflicht und strikten BLOB-Laengen - SA-02: Release-Signierung in CI entkoppelt (getrennte build und sign-and-release Jobs, Secret-Isolation) - SA-03: Pinned Download-Integritaet fuer minisign.exe in CI via SHA-256 - SA-04: Immutable Action-Pinning (@sha) und Toolchain-Pinning (1.85.0) in CI - SA-05: Session-Token vollstaendig aus URIs verbannt (403 Forbidden bei Vorkommen im Pfad/Query) - SA-06: Constant-Time Token- und Auth-Vergleiche via subtle::ConstantTimeEq - SA-07: Dokumentations-Klarstellung bzgl. logischem Shredding vs. physischer SSD/FTL/CoW-Persistenz	2026-09-18 23:40:35 +02:00
harald	1cdb30147b	release: v0.7.1 — Security-Patch (R-01 bis R-06) ... - R-01: Bereinigung verbliebener Restbehauptungen in Doku und Code (LEGAL.md, README.md, QUICKSTART.md, main.rs, crypto/storage/recovery/verify.rs) - R-02: Lückenloser Carrier-Schutz in SanctumFs::copy (Quelle & Ziel) und sync (Pull-Skip & Push-Schutz) - R-03: Shared Dateinamen-Validierung (validate_node_name) in pathutil.rs, durchgesetzt in storage.rs und vfs.rs - R-04: Fail-closed Release-Packaging & obligatorische Minisign-Signatur in CI (.gitea/workflows/release.yaml) und Scripts - R-05: Session-Token Beseitigung im argv: In-Process Win32 WNetAddConnection2W/WNetCancelConnection2W, kein gio argv-Token, Multi-Auth HTTP Middleware (Basic Auth, X-Sanctum-Token, Path-Fallback) mit 401 WWW-Authenticate - R-06: Sofortiges Löschen von SANCTUM_RECOVERY_KEY aus der Prozessumgebung	2026-09-18 19:49:38 +02:00
harald	436790abf0	feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)	2026-09-18 19:12:43 +02:00
harald	80a3bd1911	docs: update README.md with sanctum sync and in-place upgrade documentation	2026-09-16 13:46:35 +02:00
harald	2da1ea55a9	chore(release): update scoop and winget manifests for v0.6.0	2026-09-16 12:40:37 +02:00
harald	2e4cf1cef0	feat(upgrade): implement in-place self-upgrade command and bump version to v0.6.0	2026-09-16 12:33:57 +02:00
harald	1048253497	chore(release): update scoop and winget manifests for v0.5.0	2026-09-16 10:44:18 +02:00
harald	aa65d96434	feat(sync): add rsync-like sync command with dry-run and bump version to v0.5.0	2026-09-16 10:40:38 +02:00
harald	3f3f8f2730	chore(packages): update scoop and winget manifests to v0.4.1	2026-09-14 14:11:51 +02:00
harald	650cfc7cd4	chore(release): bump version to v0.4.1	2026-09-14 14:02:02 +02:00
harald	9d1a4d3ad7	build: preserve dist directory and merge SHA256 sums in package-release.ps1	2026-09-14 13:36:59 +02:00
harald	aa25719c0d	fix(linux): prevent premature unmount caused by closed channel triggers in select!	2026-09-14 13:27:10 +02:00
harald	34378998c4	feat(linux): add --mount-point CLI option and platform-aware mount messages	2026-09-12 14:36:43 +02:00
harald	4ef0c414fa	feat(linux): add static musl x86_64 build, packaging, and Freedesktop integration	2026-09-10 17:45:04 +02:00
harald	1f3afb1e52	fix(scripts): correct URL variable interpolation and add error check in publish script	2026-09-10 17:05:15 +02:00
harald	5f2040f8bf	chore(release): bump version to 0.4.0 and update manifests	2026-09-10 17:02:05 +02:00
harald	da2ddbd6ab	feat(distribution): add Scoop/Winget manifests, INSTALL.md, and Unix mount integration	2026-09-10 16:51:24 +02:00
harald	46f976b353	feat(cross-platform): add QUICKSTART.md, live crash test, and platform abstraction module	2026-09-10 16:31:57 +02:00
harald	6cb48f55d9	docs(compliance): add LEGAL.md, THIRD_PARTY_LICENSES.md, and update packaging	2026-09-10 15:14:51 +02:00
harald	7ed0f51fb1	chore(release): bump version to 0.3.1 and update release notes	2026-09-10 14:08:48 +02:00
harald	dae0b3b7c3	feat(resilience): implement CHAOS-01 to CHAOS-03 crash consistency and input guards ... - CHAOS-01: write chunk and update node size atomically via write_chunk_and_update_size in a single SQLite transaction - CHAOS-02: reject null-bytes and ASCII control characters in VFS paths and node names via validate_path_safety - CHAOS-03: invalidate in-memory chunk cache on I/O and disk-full errors to prevent drop failure cascades	2026-09-10 13:58:39 +02:00
harald	541190cff4	feat(opsec-ux): implement HF-01 to HF-04 and VFS carrier protection ... - HF-01: eliminate visual leaks between decoy and hidden vaults during mount - HF-02: add secure interactive BIP-39 recovery prompt avoiding shell history - HF-03: implement BIP-39 normalization, word index error pinpointing, and Levenshtein typo suggestions - HF-04: add --stealth mode for silent mounting in high-risk environments - VFS: enforce write, truncate, delete, rename, and directory removal protection for carrier node in decoy vault	2026-09-10 13:27:01 +02:00
harald	99813ae2a3	feat(security): add Win32 VirtualLock memory protection, CFA error diagnostics, and ShellBag OpSec	2026-09-10 12:27:57 +02:00
harald	90cf4927af	fix(release): normalize file paths for curl upload and upload standalone binary	2026-09-09 22:21:34 +02:00
harald	abf395627a	chore: release v0.3.0	2026-09-09 22:00:04 +02:00
harald	fcd59dfe68	security: harden WebDAV server against Slowloris/connection starvation and fix LZ4 bomb protection	2026-09-09 21:54:05 +02:00
harald	a8fdfc674e	fix(sre): implement PRR-01 stale mount self-healing and PRR-02 win32 console close handler	2026-09-09 21:45:35 +02:00
harald	70d03df676	fix(security): implement P3 high-entropy carrier default and P5 manifest capacity guard	2026-09-09 21:33:01 +02:00
harald	771c08ff0f	fix(security): implement P1 loopback session token, P2 AAD filename binding, and P4 memory zeroization	2026-09-09 21:24:07 +02:00
harald	98bfac718f	fix(core): resolve all 12 adversarial review findings ... - Zeroize passwords in CLI prompts, handlers, and mount authentication - Preserve carrier_node_id when recovering Slot 0 via recovery key - Add --slot parameter to restore-header for targeted slot recovery - Implement online_backup and restore_from_backup using SQLite Online Backup API - Expose 'sanctum backup' and 'sanctum restore' CLI subcommands - Fix inactivity auto-lock by removing touch() from PROPFIND metadata/read_dir - Support O_APPEND by setting file cursor to file size on handle creation - Prevent data loss by implementing Drop for CarrierFile to flush dirty blocks - Optimize CSPRNG padding to only fill unwritten slack space - Batch carrier initialization in 500-block transactions to prevent UI/CLI freeze - Enforce 64-byte savings threshold for LZ4 compression - Add WebClient service diagnostic hint for Windows net use mount errors - Add unit and integration tests covering all new features	2026-09-09 21:02:21 +02:00
harald	030ce6a1e5	feat(security): implement Phase 2 Modell A (Steganografischer Alibi-Carrier für Plausible Deniability)	2026-09-09 20:22:00 +02:00
harald	b8e4dcb614	feat(security): implement Phase 1 of Plausible Deniability hardening	2026-09-09 19:55:34 +02:00
harald	ea571d245e	fix(branding): make shield logo and Windows icon background 100% transparent	2026-09-08 11:50:05 +02:00
harald	bb4268cb62	feat(branding): add 3D shield logo, embed Windows PE icon, and update README banner	2026-09-08 11:24:15 +02:00
harald	952e0cb23a	docs(readme): update documentation for v0.2.0 release	2026-09-08 10:58:23 +02:00
harald	fb154c0d2e	docs(changelog): document v0.2.0 release changes	2026-09-08 10:51:58 +02:00
harald	5c1ac89989	chore(release): bump version to 0.2.0	2026-09-08 10:50:33 +02:00
harald	1e6854e9f5	feat(anti-forensics): implement incremental auto-vacuum, chunk shredding, and plausible deniability	2026-09-08 10:46:24 +02:00
harald	2cb065c8c0	feat(opsec): implement inactivity auto-lock, session lock detection, and anti-leak shield	2026-09-08 10:14:31 +02:00
harald	38df3d3845	feat(windows): implement explorer shell integration, auto drive allocation, auto-open, and system tray icon	2026-09-08 10:04:24 +02:00
harald	1c8a860184	feat(recovery): implement header backup/restore, BIP-39 recovery key, and integrity verification	2026-09-08 09:49:08 +02:00
harald	2d14c64c3e	feat(compression): implement transparent LZ4 chunk compression with V1 backwards compatibility	2026-09-07 21:59:42 +02:00
harald	a9c3dd25a3	feat(cli): add passwd command for instant master password changes	2026-09-07 17:29:50 +02:00
harald	58336fc059	fix(release): let curl manage multipart boundary automatically	2026-09-07 16:57:10 +02:00
harald	83dc42dd86	fix(release): write UTF-8 without BOM for release payload	2026-09-07 16:54:46 +02:00
harald	38a8a747c7	feat(release): support loading local .env in publish script	2026-09-07 16:51:12 +02:00
harald	38c0a6dc12	chore: ignore .env and token files in git	2026-09-07 16:49:35 +02:00
harald	d15ebd8916	feat(release): add automated Gitea release publisher script	2026-09-07 16:40:49 +02:00
harald	eec1971302	feat(release): setup release management with SemVer, packaging script, and Gitea CI/CD	2026-09-07 16:32:41 +02:00
harald	681fb0c032	Enhance CLI output: UTF-8 console codepage, VT colors, clean status cards	2026-09-07 16:01:50 +02:00
harald	a50dc04bb3	Fix percent-encoding in VFS paths and implement symlink_metadata for WebDAV MOVE	2026-09-07 15:49:19 +02:00
harald	9115596763	Initial commit: Sanctum encrypted single-file container for Windows	2026-09-07 15:40:58 +02:00