6 Commits

Author	SHA1	Message	Date
adlee-was-taken	bbdbcca87b	fix(core): NFC normalize backup passphrase (audit B2) ... Backup KDF was passing raw passphrase bytes to Argon2id without NFC normalization, causing cross-platform restore failures for non-ASCII passphrases (macOS NFD vs Linux NFC). Now matches derive_master_key behavior from crypto.rs. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-05-02 01:29:08 -04:00
adlee-was-taken	e02f62f961	test(core): backup error paths ... Covers bad magic, unsupported version, wrong passphrase, truncation, and tampered ciphertext. The wrong-passphrase / tampered-tag pair both collapse to RelicarioError::Decrypt — same opaque-failure contract as the live vault.	2026-04-27 22:42:44 -04:00
adlee-was-taken	1ffe333697	test(core): backup round-trips git archive + size check	2026-04-27 22:39:55 -04:00
adlee-was-taken	e4949c4c06	test(core): backup round-trips reference image bytes	2026-04-27 22:37:38 -04:00
adlee-was-taken	0b59b94a0b	test(core): populated-vault round-trip for backup	2026-04-27 22:34:36 -04:00
adlee-was-taken	08086b9a9e	feat(core): backup module — empty-vault round-trip ... pack_backup / unpack_backup ship the magic header, format version, Argon2id KDF, XChaCha20-Poly1305 AEAD, and zstd-compressed JSON envelope. Empty-vault round-trip is the foundation; later tasks add items, attachments, image, and git history.	2026-04-27 22:29:10 -04:00