Skip to content

Version 3.2 2025-10-11

Choose a tag to compare

View all tags
@F1xGOD F1xGOD released this 11 Oct 07:14
· 390 commits to main since this release
v3.2
858792b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Notes – BASEFWX v3.2 (Yubikey and Quantum-Ready)

Swapped RSA wrapping for ML‑KEM‑768 (Kyber) KEM, keeping master-key escrow alive while jumping the “store-now, decrypt-later” threat. If the PQ private key isn’t on disk (~/master_pq.sk), decryptors fall back to symmetric-only mode automatically.
Added metadata guards: decryptors now warn with Did you mean to use: … whenever the embedded method or engine version differs from the command you launched.
Extended CLI (python -m basefwx cryptin …) with --no-master, --strip/--trim, and multi-file support; README updated with usage examples.
Published a PQ key rotation recipe: one script generates the compressed base64 public blob and writes master_pq.sk; just swap MASTER_PQ_PUBLIC and ship the .sk securely.
Synced packaging (setup.py & pyproject.toml) to declare pqcrypto>=0.3.4, keeping PyPI installs self-contained; README now references pip install basefwx instead of ad hoc dependency lists.
Now supports yubikey, so you can store your passwords securely.
and MUCH more, check out the open source code to see ALL fixes and features 😉

Assets 2
Loading