Laan Tungir 44a87432b7 v0.1.26 - Security audit remediation: mlock fatal on failure, hybrid auth replay protection, HTTP Content-Length safe parsing, OTP sscanf validation, compiler hardening flags

2026-08-13 08:05:58 -04:00

..

auth_envelope.c

v0.1.26 - Security audit remediation: mlock fatal on failure, hybrid auth replay protection, HTTP Content-Length safe parsing, OTP sscanf validation, compiler hardening flags

2026-08-13 08:05:58 -04:00

auth_envelope.h

v0.1.26 - Security audit remediation: mlock fatal on failure, hybrid auth replay protection, HTTP Content-Length safe parsing, OTP sscanf validation, compiler hardening flags

2026-08-13 08:05:58 -04:00

dispatcher.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

enforcement.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

http_listener.c

v0.1.26 - Security audit remediation: mlock fatal on failure, hybrid auth replay protection, HTTP Content-Length safe parsing, OTP sscanf validation, compiler hardening flags

2026-08-13 08:05:58 -04:00

http_listener.h

v0.0.48 - Added OTP one-time pad encryption (otp_encrypt/otp_decrypt verbs), HTTP listener mode (--listen http:HOST:PORT), interactive OTP pad auto-scan on USB drives, raised SERVER_MAX_MSG_SIZE to 16MB, updated README with curl examples and current API documentation

2026-07-19 11:07:07 -04:00

key_store.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

main.c

v0.1.26 - Security audit remediation: mlock fatal on failure, hybrid auth replay protection, HTTP Content-Length safe parsing, OTP sscanf validation, compiler hardening flags

2026-08-13 08:05:58 -04:00

miner.c

v0.0.45 - Display qrexec service name (qubes.NsignerRpc) in signer connection info; use human-readable timestamps in activity log; fix static release build by adding miner.c to Dockerfile.alpine-musl

2026-07-11 19:12:34 -04:00

mnemonic.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

otp_pad.c

v0.1.26 - Security audit remediation: mlock fatal on failure, hybrid auth replay protection, HTTP Content-Length safe parsing, OTP sscanf validation, compiler hardening flags

2026-08-13 08:05:58 -04:00

otp_pad.h

v0.0.57 - Migrated to unified nostr_ prefixed verb names; removed legacy verb aliases (sign_data, ssh_sign, verify_signature, kem_encapsulate, kem_decapsulate, otp_encrypt, otp_decrypt); split get_public_key into algorithm-based get_public_key and role-based nostr_get_public_key; OTP now selected via algorithm:otp instead of curve:otp; consolidated API docs from api.md into README.md

2026-07-20 17:29:45 -04:00

policy.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

pq_crypto.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

pq_drbg.c

v0.0.47 - Added post-quantum cryptography (ML-DSA-65, SLH-DSA-128s, ML-KEM-768) and standard ECC (ed25519, x25519) support with algorithm-based API

2026-07-16 15:14:57 -04:00

role_table.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

secure_mem.c

v0.1.26 - Security audit remediation: mlock fatal on failure, hybrid auth replay protection, HTTP Content-Length safe parsing, OTP sscanf validation, compiler hardening flags

2026-08-13 08:05:58 -04:00

selector.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

server.c

v0.1.20 - Removed @ prefix from all user-facing socket name output (startup message, list command, error messages, connection display)

2026-08-06 09:19:13 -04:00

socket_name.c

v0.1.15 - Rename binaries to nsigner/nsigner_client, integrate client into release pipeline, update role+path authorization model with wizard presets and wildcard path support

2026-08-05 18:59:47 -04:00

transport_frame.c

v0.0.6 - Tier-1 TCP listener + FIPS deployment documentation

2026-05-02 18:14:20 -04:00