amethyst

Files

T

Claude bebf229826 feat: implement P2 security verifications and error handling

1. KeyPackage signature verification (RFC 9420 Section 10.1):
   - Added MlsKeyPackage.verifySignature() using SignWithLabel("KeyPackageTBS")
   - proposeAdd() now requires valid KeyPackage signature
   - Fixed createKeyPackage to sign correct KeyPackageTBS (full TBS struct,
     not just LeafNode bytes)

2. GroupInfo signature verification (RFC 9420 Section 12.4.3.1):
   - Added GroupInfo.encodeTbs() and verifySignature(signerKey)
   - processWelcome() verifies GroupInfo signature using signer's
     leaf node from the reconstructed tree

3. Parent hash validation infrastructure (RFC 9420 Section 7.9.2):
   - Added verifyParentHash() with simplified validation for leaf's
     parent_hash field against the first direct path node

4. Graceful decrypt error recovery:
   - Added decryptOrNull() that returns null instead of throwing on
     corrupted messages, wrong epoch, or AEAD failures

All 120 MLS tests pass (41 interop + 79 unit), 0 failures.

https://claude.ai/code/session_01NocQDWj2Y92FugjfgazzL3

2026-04-04 00:08:27 +00:00

.idea

Switches to our own version of the Url Detector

2026-03-06 10:58:59 -05:00

src

feat: implement P2 security verifications and error handling

2026-04-04 00:08:27 +00:00

.gitignore

…

build.gradle.kts

v1.08.0

2026-04-01 15:45:46 -04:00