Skip to content

2.0.1 (2026-06-19)

Choose a tag to compare

View all tags
@jcbrand jcbrand released this 19 Jun 09:32
v2.0.1
This tag was signed with the committer’s verified signature.
jcbrand JC Brand
GPG key ID: D48D88C41B3A34E6
Verified
Learn about vigilant mode.
385489f
This commit was signed with the committer’s verified signature.
jcbrand JC Brand
GPG key ID: D48D88C41B3A34E6
Verified
Learn about vigilant mode.

Security hardeing

  • Precompile the .proto schemas into a static protobuf module (src/generated/protocol.js, regenerated with npm run proto) instead of parsing them at runtime (which required an unsafe-eval CSP policy).
  • Harden SessionRecord deserialization against prototype-chain mutation.
  • Curve25519: fail closed on a nonzero WASM status, reject low-order/all-zero ECDH outputs (RFC 7748), and stop mutating/aliasing the caller's private key.
  • Behaviour change: the DH/signature paths now require the 33-byte 0x05-prefixed public-key form; raw 32-byte keys are rejected.
  • Constant-time util.isEqual (only used for public signatures currently)
  • Add SECURITY.md
Assets 2
Loading