 thePR0M3TH3ANandClaude Fable 5
|
6d6ad5e2c5
|
TS port slice 2: entry schemas, password KDF, legacy vault formats
- Zod schemas for all 9 entry kinds (schema_version 4): validate and
roundtrip the Python EntryManager-generated fixture unchanged; refuse
future schema versions.
- Password KDF parity: PBKDF2-SHA256 (NFKD+strip, fingerprint salt, 50k/100k
iters) and Argon2id via @noble/hashes, both fixture-verified.
- Legacy vault decrypt chain matching EncryptionManager.decrypt_data:
V3 GCM -> V2 GCM -> V2-header-over-Fernet -> raw Fernet (decrypt-only),
plus the JSON kdf/ct file wrapper with bare-ciphertext fallback; the
parent-seed file decrypts end-to-end from password.
- Fixture generator grows password_kdf.json and legacy_payloads.json
(pinned IVs/nonces, fixture-only).
- 100 parity tests green in Node and jsdom.
Co-Authored-By: Claude Fable 5 <[email protected]>
|
2026-08-13 10:23:56 -04:00 |
|