onionwire

sirius/onionwire

Fork 0

Commit graph

Author	SHA1	Message	Date
Sirius DevOps	f75c434db7	[verified] fix(store): bind chat AEAD to row AAD Some checks failed ci / test (pull_request) Failing after 2m59s Details ChaCha20-Poly1305 at rest now MACs owmsg1\|\|friend_id_le64\|\|dir\|\|0x00\|\|row_id_le64. Swapped ciphertext fails closed. Empty-AAD v0.2 blobs rewrap once on unlock; list_messages never falls back to empty AAD.	2026-09-10 19:41:00 -04:00
Sirius DevOps	6323619d80	feat(store): encrypt chat bodies at rest; Ctrl-Q CLEAR/QUIT All checks were successful ci / test (pull_request) Successful in 3m13s Details Wrap a random 32-byte message key with Argon2id+ChaCha20-Poly1305. sqlite messages.plaintext is nonce\|\|ciphertext; identity keys stay plaintext. Empty/wrong passphrase fails closed. Ctrl-Q types CLEAR or QUIT then Enter (Esc cancels).	2026-09-10 17:19:50 -04:00
Sirius DevOps	e63203ff56	feat: incoming rate limit, identity backup, v0.2.0 All checks were successful ci / test (push) Successful in 4m11s Details App-level token bucket on rend accepts (30/60s, burst 10), panic-safe TUI restore, sqlite WAL + integrity_check fail-closed. Encrypted owbak1 identity backup/restore. README and threat model cover profile, XMR sidecar, backup, mixed-version frames.	2026-09-10 14:50:01 -04:00

Author

SHA1

Message

Date

Sirius DevOps

f75c434db7

[verified] fix(store): bind chat AEAD to row AAD

ci / test (pull_request) Failing after 2m59s

Details

ChaCha20-Poly1305 at rest now MACs owmsg1||friend_id_le64||dir||0x00||row_id_le64.
Swapped ciphertext fails closed. Empty-AAD v0.2 blobs rewrap once on unlock;
list_messages never falls back to empty AAD.

2026-09-10 19:41:00 -04:00

Sirius DevOps

6323619d80

feat(store): encrypt chat bodies at rest; Ctrl-Q CLEAR/QUIT

ci / test (pull_request) Successful in 3m13s

Details

Wrap a random 32-byte message key with Argon2id+ChaCha20-Poly1305.
sqlite messages.plaintext is nonce||ciphertext; identity keys stay
plaintext. Empty/wrong passphrase fails closed. Ctrl-Q types CLEAR or
QUIT then Enter (Esc cancels).

2026-09-10 17:19:50 -04:00

Sirius DevOps

e63203ff56

feat: incoming rate limit, identity backup, v0.2.0

ci / test (push) Successful in 4m11s

Details

App-level token bucket on rend accepts (30/60s, burst 10), panic-safe TUI restore, sqlite WAL + integrity_check fail-closed. Encrypted owbak1 identity backup/restore. README and threat model cover profile, XMR sidecar, backup, mixed-version frames.

2026-09-10 14:50:01 -04:00

3 commits