v3.0.0

2025-06-23

LEA v3.0.0 — Major Rewrite and CLI Overhaul

🚀 What's New

• New Key Management System

  • Introduces a new armored key file format (key128.lea, key192.lea, key256.lea) with embedded metadata and SHA-256 digests.
  • Adds lea keygen CLI command for secure, interactive key generation.
  • Encryption/decryption now require the --key=<file> flag (deprecated: -ek, -es).
  • Key and seed are now validated and parsed for integrity.

• Modernized CLI and Help System

  • Fully reworked CLI flags:
    • Operations: -e/--encrypt, -d/--decrypt
    • Key: --key=<file>
    • Modes: --mode=ecb|cbc|cfb|ofb|ctr (CTR added; CBC is now default)
    • Recursion: -r/--recursive
    • Verbosity: -v/--verbose
    • Overwrite/Wipe: --iter=N
    • Help: -h/--help
    • Version: --version
  • Improved flag handling and help output.
  • -h and --version now function robustly and exit cleanly.

• New Features & Modes

  • Adds CTR (Counter) mode support.
  • Secure multi-pass file wiping after encryption/decryption (DoD 5220.22-M style).
  • Progress bar and status display improvements.

• Technical/Codebase Changes

  • Deprecated all usages of -ek/--external-key and -es/--external-seed.
  • Refactored and internalized key scheduling, fingerprinting, and digest verification.
  • Improved modularity: new packages for key generation, loading, verification.
  • Renamed and cleaned up internal state and argument handling.
  • Major refactor for safety, maintainability, and security best practices.

• Documentation

  • Updated Readme.md with new usage examples, key management, and CLI changes.
  • Added detailed help messages and legal disclaimer (for authorized testing only).

---

⚠️ Breaking Changes

• Old external key/seed file flags are no longer supported.
• All scripts and automations must use the new --key syntax and keyfile format.
• Custom seed files and legacy key handling are deprecated.

---

Full Changelog