Skip to content

feat(core): remove legacy key wrapper support - #20

Merged
kauandotnet merged 1 commit into
mainfrom
feat/fresh-only-salted-wrapper
Aug 17, 2026
Merged

feat(core): remove legacy key wrapper support#20
kauandotnet merged 1 commit into
mainfrom
feat/fresh-only-salted-wrapper

Conversation

@kauandotnet

Copy link
Copy Markdown
Contributor

Outcome

  • Accept only the 81-byte NESTM-A256GCM-HKDF-SHA256-SALT256-V2 wrapper.
  • Remove A256GCMKW v1 unwrap, exports, fixtures, and compatibility tests.
  • Regenerate all NMF1 detached-key vectors with the production salted wrapper.
  • Document the reset-only development contract.

Verification

  • pnpm run verify
  • 17 files / 199 tests passed
  • 10 NMF1 vectors passed and independently recovered their fixture DEKs
  • build, publint, attw, and packed consumers passed

This intentionally requires resetting development ciphertext written with the removed wrapper.

@kauandotnet
kauandotnet merged commit 8e48467 into main Aug 17, 2026
5 checks passed
@kauandotnet
kauandotnet deleted the feat/fresh-only-salted-wrapper branch August 17, 2026 22:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant