Skip to content

ClatsGuard Heavy

Latest
Latest

Choose a tag to compare

View all tags
@Clats97 Clats97 released this 21 Sep 15:34
· 1 commit to main since this release
v1.03
3fb797a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

v1.03 Latest Release

The release of ClatsGuard Heavy was a huge step forward in file encryption. However, I improved upon it, and now we have version 1.03.

Security Enhancements

  • Deterministic Nonces for ChaCha20

    • Replaced random secrets.token_bytes() nonces with a deterministic per-segment counter (_nonce_for_chacha(seg_index)) to eliminate risks of nonce reuse.

  • Secure File Deletion

    • Introduced _secure_delete which overwrites files with random data before removal, reducing recovery risk compared to plain os.remove().
    • Integrated _secure_delete into the "Delete after encryption" option.

  • Tighter AES-GCM-SIV Validation

    • Refined ciphertext length validation during decryption from CHUNK_SIZE + TAG_LENGTH + NONCE_LENGTH down to CHUNK_SIZE + TAG_LENGTH, preventing acceptance of malformed segments.

User Experience Improvements

  • Weak Passphrase Warning
    • Added a prompt when a passphrase shorter than 10 characters is entered, warning the user and requiring confirmation to proceed.

Additional Changes

  • Added _nonce_for_chacha utility for deterministic nonce derivation.
  • Added _secure_delete utility for secure file wiping.
Assets 3
Loading