Skip to content

Noctua-C v1.3.0

Latest

Choose a tag to compare

@github-actions github-actions released this 11 Aug 12:03
· 21 commits to main since this release
3a506eb

Noctua-C v1.3.0

23 features and fixes since v1.2.0 — side-channel analysis stack, file recovery, self-healing remedy, adaptive watchdog.

⚡ Side-Channel Analysis (SCA)

  • sca-dynamic — real-time timing jitter measurement with noise baseline.
  • sca-harness — intra-process cache-timing harness (DR0 + rdtsc), auto-adaptive ptrace→perf→baseline.
  • sca-hsaq — side-channel analysis with HSAQ adaptive pruning (kthvalue median).
  • sca-attack — generic cache-timing subkey recovery for any cipher (AES/SM4/DES/Blowfish/RC4 tables).
  • power-analysis — CPA/DPA recovers AES key from oscilloscope power traces; SPA recovers RSA private exponent.
  • em-analysis — near-field H-probe grid → die leak localization (heatmap) + AES key recovery.
  • sca-general — cipher fingerprinting on any chip/firmware + HEX offsets.
  • tpm — TPM 2.0 firmware analysis (crypto, keys, side channel).
  • virt — hypervisor/VM detection.

🔄 File Recovery

  • recover — restores ORIGINAL decoded files from packed/compressed/encrypted blobs:
    detect container → decompress (gzip/zlib/zip/lzma/lz4/zstd/UPX) → decrypt (crypto-auto) →
    sca-attack fallback for missing keys → decompile readable C. Written to standard per-OS dir.

🛠 Self-Healing Remedy

  • make remedy — integrity gate + fork audit (supply-chain) + warning surfacing + scan-build +
    ASan/UBSan + leak scan + auto-fix + passive issue/PR (silent, upstream-gated).

🧠 Stability & Platform

  • Adaptive CPU-progress watchdog — deadline self-extends while CPU advances; hang detection with debug dump + backtrace.
  • Process/memory cleanup — SIGCHLD reaper, no zombie accumulation.
  • Standard per-OS data dir — reports/recovered in ~/.local/share/noctua (XDG), macOS App Support, %LOCALAPPDATA%.
  • Professional HTML report rendered to PDF via headless chromium (replaces LaTeX).

📱 Mobile & Automation

  • APK source decompilation — jadx bundled, auto dispatch (GUI/web/CLI), NOCTUA_APK_OUT persistent Java sources.
  • Web auto-switch port — REST/Web GUI auto-discovers free port when 8080 busy.
  • dtb_diff — device tree binary analysis.

🔧 Fixes

  • notarize no longer hangs on high-entropy content; NOCTUA_TIMEOUT propagates; auto degrades gracefully on blobs; jadx judged by generated sources; chromium not killed by RLIMIT_AS; extract_strings leak.

Assets: noctua CLI, libnoctua.so, libnoctua.a, checksums, AI-generated logo.