Skip to content

v1.0.14

Latest
Latest

Choose a tag to compare

View all tags
@cabelo cabelo released this 27 Sep 06:18
· 10 commits to main since this release
v1.0.14
36c3f81
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

libzupt 1.0.14

This release strengthens authentication, encrypted record validation, secure key handling, packaging, and build integration. Thank you @cristiancmoises

Highlights

  • Improved encrypted record authentication and validation, rejecting malformed, reordered, repeated, oversized, or tampered records.
  • Empty messages are now represented by authenticated records.
  • Hardened POSIX private-key writes and fixed SecureBuffer cleanup during move operations.
  • Improved CMake package support for both shared and static consumers.
  • Unified runtime and CMake version reporting.
  • Strengthened release validation with tag/version checks, pinned GitHub Actions, read-only permissions, and measured test reporting.
  • Source packages now generate level-9 solid .zupt archives with extraction verification and SHA-256 checksums.
  • Added English and Brazilian Portuguese documentation.

Validation

All 8 library tests passed with GCC 14 in Release mode and Clang 22 with UBSan. Shared and static consumer tests also passed after installation relocation.

Known Limitation

Removing complete trailing encrypted blocks may still leave a valid authenticated prefix because the current format does not authenticate the total message length or provide an authenticated end marker. Existing zero-byte ciphertexts are rejected and should be re-encrypted.

Contributors

cristiancmoises
Assets 2
Loading