test(security): Phase 4 audit — test coverage + 11 impl fixes#986

Merged

boorad merged 8 commits into

mainfrom

feat/security-audit-phase-4

Apr 27, 2026

Commits on Apr 27, 2026

test(security): Phase 4.5 — fix fire-and-forget async assertions (PBKDF2, Random)
boorad
committed
test(security): Phase 4.2 — RFC test-vector coverage (HKDF, Argon2, Scrypt, BLAKE3)
boorad
committed
test(security): Phase 4.1 — NIST KAT coverage (Hash, AES-GCM/CCM/OCB, ML-DSA, ML-KEM)
boorad
committed
test(security): Phase 4.3 — AEAD misuse-resistance tests
boorad
committed
test(security): Phase 4.4 — wrong-key/IV size rejection sweep
boorad
committed
test(security): Phase 4.6 — cross-implementation verification (Node.js ↔ RNQC)
boorad
committed
fix(crypto): resolve 11 failing tests from Phase 4 security audit
boorad
committed
fix(ci): switch rnqc tsconfig moduleResolution from `node` to `bundler`
boorad
committed