feat(security): Phase 3 audit — TS-boundary validation + WebCrypto hardening#985

Merged

boorad merged 10 commits into

mainfrom

feat/security-audit-phase-3

Apr 27, 2026

Commits on Apr 27, 2026

ci: fix GitHub Actions warnings on PR runs
boorad
committed
feat(security): Phase 3.1 audit — TS-layer cipher param validation
boorad
committed
feat(security): Phase 3.2 audit — KDF parameter validation at TS layer
boorad
committed
feat(security): Phase 3.3 audit — RSA modulus min 2048 bits
boorad
committed
feat(security): Phase 3.4 audit — DSA modulus min 1024 bits
boorad
committed
feat(security): Phase 3.5 audit — WebCrypto subtle hardening
boorad
committed
feat(security): Phase 3.6 audit — stream _transform/_flush error propagation
boorad
committed
docs(security): mark Phase 3 complete + log CI fixes and 6 sub-tasks
boorad
committed
fix(cipher): align libsodium error wording, fix DES-EDE order, query getCipherInfo for IV length
boorad
committed
refactor(security-audit): Phase 3 review polish — cipher fast-path, HKDF unknown-digest throw, type tightening, idiomatic stream tests
boorad
committed