Zerion 2.0.6
A reliability and hardening release. Both people need this version to add each other.
Contacts and pairing
- Adding a contact is reliable again. Fixed crashes during the pairing handshake, and hardened the add-contact path: forward secrecy is now required, the post-quantum capability is authenticated, links are decoded strictly, and incoming pairing attempts are rate limited.
- The pairing rendezvous is now a real shared secret. The link carries a commitment plus an X25519 rendezvous key, replacing an earlier rendezvous value that a network observer could derive.
Reliability
- Connections recover immediately after a drop, so contacts stay online more consistently. Removed a fixed timer that recycled healthy connections.
- Voice memos are chunked for reliable delivery, and a race that could stall delivery on fast connections is fixed.
- Joining older channels works again.
Security
- The per-message post-quantum ratchet was audited and stabilized, fixing a message-delivery stall.
- Bounded the message decoder against malformed input, consolidated secure file deletion, and fixed several review findings.
Polish
- Clearer wording, accessibility labels on icon buttons, and a large internal cleanup.
Build
- Reproducible build from the tagged commit (
4a540ac).
Verify the download
SHA-256 of zerion-2.0.6.apk:
94ba836e6ef1093bc394567b7b0f88f2279ae577ebf2271774638b063a7ecbb5