gitea_admin
released this
2026-07-02 17:31:01 +00:00
| 353 commits to main since this release
Added
- Add Poly1305 one-time MAC module (
crypto/poly1305.zig): typed one-shot mac() + constant-time verify() over std.crypto.onetimeauth.Poly1305, with RFC 8439 §2.5.2 and ZeroTier selftest KATs plus a fuzz target.
crypto/salsa20: Salsa20 stream cipher (both /12 and /20 rounds) as a typed, counter-advancing context (Salsa20/Salsa12 over std.crypto.stream.salsa), plus memxor; validated against public DJB Salsa20 keystream vectors with an encrypt/decrypt round-trip fuzz target.- AES-256 (ECB/CTR) + ZeroTier AES-GMAC-SIV AEAD (
src/crypto/aes.zig), KAT-verified against FIPS-197, NIST SP 800-38A, and ZeroTier's published GMAC-SIV vectors, with a aes-gmac-siv fuzz target (reject-arbitrary + encrypt→decrypt round-trip).
crypto/ecc: Curve25519 identity primitives — X25519 ECDH (dhPublicKey/dhAgree) and Ed25519 signing (keyPairFromSeed/sign/verify/verifyOk), thin typed wrappers over std.crypto with RFC 7748 + RFC 8032 KATs and an ed25519-verify fuzz target.lz4: LZ4 block-format compress/decompress (the codec ZeroTier applies to packet payloads) — pure-Zig, no-heap, with a fail-closed safe decoder that bounds-checks every offset/length on untrusted input, plus a memory-safety fuzz target (lz4-decompress).- Project scaffold:
zerotea daemon exe (--version/--help), core library root, and the
property-based fuzz harness (zig build fuzz).
- CI/CD onboarding into the seanfarm pipeline (server-package taxonomy) with per-commit build +
smoke-fuzz and a continuous deep-fuzz CronWorkflow.
docs/METHODOLOGY.md — the CI/CD-vs-chatbot commit-history experiment + metrics harness.
Downloads