thePR0M3TH3AN
46f753a11a
Merge pull request #870 from PR0M3TH3AN/fix-key-derivation-salt-12798847451274058286
...
🔒 Fix Weak Key Derivation by Adding Salt
2026-02-16 12:24:12 -05:00
google-labs-jules[bot] and PR0M3TH3AN
75fe5bc382
Fix weak key derivation by adding salt to parent seed encryption
...
Introduced a random salt to key derivation for parent seed encryption to prevent rainbow table attacks. The salt is now stored in the `parent_seed.enc` file header (V3 format).
* Modified `src/utils/key_derivation.py` to accept optional `salt` argument.
* Modified `src/seedpass/core/encryption.py` to read/write salt in `parent_seed.enc` using V3 format (V3:salt:nonce:ciphertext).
* Modified `src/seedpass/core/manager.py` to generate salt for new seeds and read salt for existing ones.
* Added auto-upgrade logic for legacy (no salt) seeds upon access.
* Updated tests to verify salt usage and backward compatibility.
Co-authored-by: PR0M3TH3AN <[email protected]
2026-02-16 17:22:54 +00:00
google-labs-jules[bot] and PR0M3TH3AN
d729466513
test(utils): Add test and error handling for wiped InMemorySecret
...
- Updated `InMemorySecret.get_bytes()` in `src/utils/memory_protection.py` to raise a `RuntimeError` if the secret has been wiped, replacing the previous `AttributeError`.
- Added `test_access_after_wipe_raises_error` to `src/tests/test_memory_protection.py` to verify this behavior.
Co-authored-by: PR0M3TH3AN <[email protected]
2026-02-16 17:21:45 +00:00
google-labs-jules[bot] and PR0M3TH3AN
cc42e7d6f0
chore: remove dead code from src/utils/imghdr_stub.py
...
Removed the `test()` and `testall()` functions and the `if __name__ == "__main__":` block which were used for manual testing and are not needed by the codebase.
This improves maintainability and readability by focusing the module on its core functionality.
Co-authored-by: PR0M3TH3AN <[email protected]
2026-02-16 16:42:01 +00:00
google-labs-jules[bot] and PR0M3TH3AN
0a349df058
chore(ai): style-agent run
...
- Formatted 8 files with black.
- Ran flake8 and logged warnings.
- Verified with pytest.
- Scheduler operations completed (lock check, lock, complete).
- Wrote task log to torch/task-logs/daily/.
Co-authored-by: PR0M3TH3AN <[email protected]
2026-02-16 12:54:54 +00:00
thePR0M3TH3AN
cc8fba9f12
Add key validation utilities and integrate
2025-08-01 10:38:40 -04:00
thePR0M3TH3AN
764631b8ba
Use masked input for all sensitive prompts
2025-07-17 10:04:06 -04:00
thePR0M3TH3AN
04548c44f5
Enhance seed entry prompts with masking and clear screen
2025-07-16 12:37:58 -04:00
thePR0M3TH3AN
04dc4e05da
Add interactive seed word prompt
2025-07-16 03:40:24 -04:00
thePR0M3TH3AN
d7547810fe
Add cross-platform masked input utility with tests
2025-07-16 03:32:06 -04:00
thePR0M3TH3AN
113fd1181a
Add custom seed profile names
2025-07-15 21:56:31 -04:00
thePR0M3TH3AN
74f5911bf7
Use notification helper consistently
2025-07-14 17:01:49 -04:00
thePR0M3TH3AN
b8a5ed9f66
Add header clearing with notifications
2025-07-14 15:23:37 -04:00
thePR0M3TH3AN
5bf2bc458c
Update menu notification handling
2025-07-14 12:53:53 -04:00
thePR0M3TH3AN
19d9c45d6f
Add notification draining with color categories
2025-07-14 11:20:05 -04:00
thePR0M3TH3AN
f86067c1d8
Add Argon2 key derivation option
2025-07-13 12:24:10 -04:00
thePR0M3TH3AN
496950c501
Improve password retry flow
2025-07-12 09:37:42 -04:00
thePR0M3TH3AN
b82a816cab
Persist last used fingerprint
2025-07-11 16:39:51 -04:00
thePR0M3TH3AN
76b28e49b9
Enhance fingerprint headers
2025-07-07 21:41:09 -04:00
thePR0M3TH3AN
368e44c56f
Add managed account support
2025-07-07 21:27:30 -04:00
thePR0M3TH3AN
c35c4d66a0
Enhance CLI breadcrumbs and update menu color
2025-07-06 09:25:45 -04:00
thePR0M3TH3AN
512a92a65b
feat: show seed fingerprint on each screen
2025-07-06 08:10:12 -04:00
thePR0M3TH3AN
7b9b9a082e
Pause before clearing screen
2025-07-05 21:53:17 -04:00
thePR0M3TH3AN
5b2757830e
Add clear_screen helper and integrate into menus
2025-07-05 20:21:49 -04:00
thePR0M3TH3AN
e7d6b7d46e
Add color scheme helper and apply to menus and stats
2025-07-05 19:06:46 -04:00
thePR0M3TH3AN
a67b191218
Fix imghdr stub for Python 3.13
2025-07-05 15:01:17 -04:00
thePR0M3TH3AN
a5f46f356f
Fix Windows TOTP and PGP issues
2025-07-05 14:28:40 -04:00
thePR0M3TH3AN
5a63797951
fix timed_input on Windows
2025-07-05 14:03:33 -04:00
thePR0M3TH3AN
2772a11d84
Fix Windows exclusive lock test
2025-07-05 13:27:12 -04:00
thePR0M3TH3AN
b3047484df
Automate script checksum handling
2025-07-04 12:38:56 -04:00
thePR0M3TH3AN
e45adea8b2
Improve clipboard handling
2025-07-04 11:54:13 -04:00
thePR0M3TH3AN
9b9fc038d3
Update settings menu test for new option
2025-07-03 23:55:27 -04:00
thePR0M3TH3AN
d40156c205
Add in-memory secret encryption
2025-07-03 09:58:37 -04:00
thePR0M3TH3AN
2a72464268
Add BIP85 TOTP derivation
2025-07-02 23:50:56 -04:00
thePR0M3TH3AN
7fd727cf96
Add TotpManager and TOTP utilities
2025-07-02 23:41:03 -04:00
thePR0M3TH3AN
d270236a41
Add timed input for inactivity and tests
2025-07-02 23:30:26 -04:00
thePR0M3TH3AN
fb9b9e6607
Remove bip85 dependency and unused KeyManager
2025-07-02 21:56:50 -04:00
thePR0M3TH3AN
c83b8c3074
Introduce custom error classes
2025-07-02 21:29:18 -04:00
thePR0M3TH3AN
d2832db194
Remove password-based encryption modes
2025-07-02 18:48:15 -04:00
thePR0M3TH3AN
8b5b4856ff
Handle missing checksum file
2025-07-01 22:30:06 -04:00
thePR0M3TH3AN
c10e2380e5
Add checksum verification for portable backups
2025-07-01 21:43:52 -04:00
thePR0M3TH3AN
f6a94d06cc
Use exc_info for error logging
2025-07-01 18:23:44 -04:00
thePR0M3TH3AN
d7ea493663
Adjust logging for tests
2025-07-01 15:16:01 -04:00
thePR0M3TH3AN
5269030d06
Add concurrency stress test and minor path typing
2025-07-01 14:10:47 -04:00
thePR0M3TH3AN
78fe4be222
Remove unused os import
2025-07-01 11:56:42 -04:00
thePR0M3TH3AN
f49daca4df
Add EncryptionMode enum and integrate index key derivation
2025-07-01 11:01:22 -04:00
thePR0M3TH3AN
5704a91d98
Add seed-based index key derivation
2025-07-01 10:31:24 -04:00
thePR0M3TH3AN
c05123c638
Fix shared_lock timeout handling
2025-06-30 14:43:37 -04:00
thePR0M3TH3AN
0a41bd84b9
Fix exclusive_lock indefinite wait
2025-06-30 14:30:56 -04:00
thePR0M3TH3AN
a2a3236248
Add shared file lock and concurrency test
2025-06-29 22:58:43 -04:00
thePR0M3TH3AN