Claude 29d1610d1a fix: critical Marmot/MLS bugs - crashes, crypto, protocol compliance ...

- C1: Fix leaveGroup() crash (used group state after deletion)
- C2: Fix X25519.bigIntegerToBytes ArrayIndexOutOfBoundsException
- C3: Add all-zeros DH check to prevent small-subgroup attacks
- C4: Fix path secret derivation off-by-one (RFC 9420 Section 7.4)
- C5: Use constant-time comparison for confirmation/membership tags
- C6: Stage signing keys in proposeSigningKeyRotation, promote on commit
- C7: Make commit conflict tracker per-(group,epoch) not just per-epoch
- C8: Fix tree deserialization leafCount for trimmed trees
- H8: Add Mutex-based thread safety to MlsGroupManager
- H9: Fix extractPrivateKeyBytes little-endian padding
- H12: Blank direct path on addLeaf (RFC 9420 Section 7.7)
- M14: Track actual leaf index from addLeaf for Welcome generation

https://claude.ai/code/session_018gVkmmYgMFtBH7G31pCk9N

2026-04-07 23:02:09 +00:00

..

src

fix: critical Marmot/MLS bugs - crashes, crypto, protocol compliance

2026-04-07 23:02:09 +00:00

.gitignore

Starting a new module for app benchmarks

2024-02-05 18:18:33 -05:00

build.gradle.kts

Fixes test cases

2026-04-06 09:22:21 -04:00

consumer-rules.pro

Starting a new module for app benchmarks

2024-02-05 18:18:33 -05:00

proguard-rules.pro

Moves test assets to resources to make it work with kmp

2025-08-27 21:09:21 -04:00