Skip to content

v0.2.3

Choose a tag to compare

@dbowm91 dbowm91 released this 24 Jul 21:53
· 334 commits to main since this release

Release 0.2.3 — Header-driven v3 extraction, structured embedding outcomes, and detached-manifest trust.

Highlights

  • Header-driven v3 extraction: All 8 extraction paths (LSB, DCT, tiled LSB, tiled DCT, and verify variants) now check v3 magic from the first extracted candidate and re-extract with the exact total_bits declared in the v3 header
  • Structured embedding outcomes: EmbedOutcome and EmbedPath types replace silent no-ops in LSB and DCT embedding, propagating through warnings, reports, JSON, and strict CLI behavior
  • Distinct authentication outcomes: Missing HMAC key and wrong HMAC key produce different statuses (AuthenticationKeyMissing vs AuthenticationFailed) in both embedded reference and extraction paths
  • CLI detached-manifest trust: --payload-key for HMAC verification, --key for Ed25519 trust, end-to-end integration tests for keygen/sign/verify-manifest workflows
  • Resource usage counters: Production paths populate PNG chunk, JPEG segment, and WebP RIFF chunk counts

See CHANGELOG.md for full details.