v1.2.1

CIPH v1.2.1 — Security Hardening & Correctness Fixes

This release strengthens protocol correctness and integrity guarantees
without changing any user-facing behavior or workflow.

🔒 Security & Correctness

• Bind exact on-disk filename bytes directly into the authenticated
  header (AAD), eliminating edge-case mismatches during decryption.
• Ensure header authentication reflects the precise serialized metadata
  written at encryption time.
• Harden encrypted chunk size validation to prevent malformed or truncated
  input from causing unsafe behavior.
• Improve streaming safety and fail-closed behavior during decryption.

🛠️ Internal Changes

• Updated native encryption engine to enforce stricter metadata binding.
• Improved robustness of chunk parsing and boundary checks.
• Version bumped to v1.2.1.

🔁 Compatibility

• Fully backward-compatible.
• Encrypted files produced by earlier versions continue to decrypt correctly.
• No re-encryption required (recommended for maximum guarantees).

✅ Summary

CIPH v1.2.1 focuses on correctness, safety, and protocol integrity.
This release further hardens the format against edge cases and malicious
inputs while preserving performance and usability.

Recommended for all users.

What's Changed

• Security upgrade by @ankit-chaubey in #2

Full Changelog: v1.2.0...v1.2.1