v1.4.0

Changelog

• 7147ca3 chore(deps): add github.com/klauspost/compress for zstd support
• e779379 chore(goreleaser): bundle LICENSE, README.md, SECURITY.md, and man page in archives
• e9e1e73 docs(cipherlock.1): add bench command, flags, and examples to man page
• 07a5eda feat(cipherlock): add zstd compress/decompress streaming helpers
• ba95497 feat(cipherlock/asymmetric): wire zstd compression into v0x08 asymmetric
• 1d1a384 feat(cipherlock/config): add Compression field to Config and Profile
• 0b94210 feat(cipherlock/format): add flagCompressed format constant
• dbed156 feat(cipherlock/multi_stream): wire zstd compression into v0x07 multi-recipient
• 47dcaf3 feat(cipherlock/stream_v2): wire zstd compression into v0x06 encrypt/decrypt
• 70fffbd feat(cmd): add --compress flag to encrypt and gate commands
• 9d99f01 feat(dial): accept a name argument for the key file prefix
• 1309d72 feat(key): add key fingerprint subcommand for public key verification
• 958ffcd feat(rotor): add --compress and --checksum flags for re-encryption
• cc589dc feat: add cipherlock bench command for auto-tuning Argon2id parameters
• 3be3c0a feat: add cobra doc generator and auto-generated CLI reference docs
• 645d380 fix(cipherlock/stream): route compression to v0x06 streaming format
• b3476a5 fix(gate): reject already-encrypted input in gate encrypt
• 96d146c fix: add maxRecipients bound check to readStreamMultiMeta
• 708c966 fix: capture buf.Len before WriteTo drains buffer in safeWriter.Commit
• 6e0c3cb fix: clear all passwords in savePasswordsToKeychain
• 60912c4 fix: clear fileKey and validate recipients on error paths in EncryptAsymmetric
• caf7e78 fix: remove unused sumCols function from bench command
• 2543169 fix: replace invalid 7d duration example in expires-in help text
• b2c5bd0 fix: trim trailing slashes from directory path before appending .cipherlock extension
• 0f5d863 fix: use original password bytes for charset classification
• e19e8d6 fix: use os.Stdin for fd 0 and trim/clear passphrase in genkey
• dba3b0c perf: optimize zstd compression with encoder pool and reduced goroutine contention

v1.3.0

Changelog

• 922c2b8 feat: add --time/--memory/--threads to encrypt, --ssh-privkey/--passphrase-file to decrypt
• 1d4aeaf fix: copy privkey before clear in IdentityFromSSHPrivateKey
• e55b2aa fix: handle -o - as stdout; clean partial output on error; detect armored files
• 8b829c2 fix: remove ineffectual r2 assignment in info.go
• a6f6b41 fix: resolve 8 audit findings — shred nil-ptr, rekey OOM, genkey order, password clearing
• 25e3088 fix: wait for goroutine in EncryptDirContext/DecryptDirContext to prevent temp dir cleanup races