cristiancmoises/zupt
Watch
1
0
Fork
You've already forked zupt
 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions 3
1 release 17 tags
  • v4.0.0 544a2cd647

    VaptVupt 4.0.0 — codec 2.60.4 (security), --pq-box, F-16 fix
    Some checks failed
    CI / build-and-test (clang) (push) Has been cancelled
    Details
    CI / build-and-test (gcc) (push) Has been cancelled
    Details
    CI / strict-warnings (clang, -Wall -Wextra -Wpedantic -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnull-dereference -O2 -std=c11 -Werror) (push) Has been cancelled
    Details
    CI / strict-warnings (gcc, -Wall -Wextra -Wpedantic -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnull-dereference -Wformat-security -Wlogical-op -Wjump-misses-init -Wdouble-promotion -O2 -std=c11 -Werror) (push) Has been cancelled
    Details
    CI / sanitizers (push) Has been cancelled
    Details
    CI / pie-hardening (push) Has been cancelled
    Details
    CI / cross-aarch64 (push) Has been cancelled
    Details
    CI / dist-reproducibility (push) Has been cancelled
    Details
    CI / packaging-syntax (push) Has been cancelled
    Details
    CI / release (push) Has been cancelled
    Details

    Ghost released this 2026-06-10 21:49:24 +00:00 | 108 commits to master since this release

    Security release of the vendored codec (2.60.4): fixes a high-severity
    OOB heap write in the AVX2 decode fast path. Adds a third post-quantum
    recipient mode (--pq-box, libpqvaptvupt 0.6.0: ML-KEM-768 + X25519 via
    HKDF-SHA256, AES-256-CTR + HMAC-SHA256 EtM). Discloses and fixes F-16, a
    pre-existing data-loss defect in the <= 3.8.0 BCJ encoder.

    Wire format v1.6 unchanged; every readable pre-4.0 archive remains
    readable. See CHANGELOG.md for the full entry and back-compat matrix.

    GUI front-end shipped at vaptvupt-gui 1.3.0.

    Downloads