Watch

Cristian Cezar Moisés 124958aea9 v4.2.0: full (pure) post-quantum mode + critical dedup nonce fix

Add a native full post-quantum encryption mode and fix a critical
keystream-reuse bug in deduplicated encrypted archives.

Full post-quantum mode (--pq-only)
- New envelope type 0x06 (ZUPT_ENC_PQ_ONLY): ML-KEM-768 (FIPS 203) as
  the sole key-establishment mechanism, with no classical X25519
  component. Archive key = SHA3-512(ml_ss || ml_ct || "ZUPT-PQ-ONLY-v1").
- For compliance postures that require a single NIST-standardised PQ
  primitive with no classical KEM in the envelope (CNSA 2.0-style
  "PQ-only"). Hybrid --pq stays the recommended default; --pq-only has
  no classical fallback, so a break of ML-KEM-768 alone breaks it.
- keygen --pq-only / keygen --pub --pq-only (ZPQK magic, 1200B pub /
  3600B priv; not interchangeable with hybrid --pq keys). Wrong or
  tampered ciphertext is rejected via ML-KEM FO implicit rejection plus
  the HMAC-SHA256 Encrypt-then-MAC envelope. In-tree, default build.

Security (critical): AES-256-CTR keystream reuse under --dedup
- Dedup assigns block sequence 0 to every data block (the sentinel that
  keeps cross-file dedup references authenticating consistently). The
  per-block nonce was base_nonce XOR block_seq, so under --dedup every
  block collapsed to the same nonce, reusing the CTR keystream across
  distinct plaintexts (a many-time-pad). Each block now uses a fresh
  random 128-bit nonce stored in the block prefix and bound into the
  block MAC; block_seq is still bound as MAC AAD. Regression test:
  tests/test_dedup_nonce.sh. Re-encrypt any --dedup encrypted archives
  written by <= 4.1.0.

Other
- keygen --sdk / --box on a source-only build now fails with a clear
  message pointing to native --pq / --pq-only (or a WITH_SDK=1 build).
- Documentation: README, SECURITY, THREAT_MODEL, man page, CHANGELOG,
  and all packaging recipes updated for the new mode and the security
  fix; version bumped to 4.2.0. Wire format v1.6 unchanged (0x06 is
  additive).

Validation: make check 16/16, quick suite 11/11 (incl. PQ-only),
dedup-nonce regression (all block nonces distinct), cppcheck clean.

2026-07-09 21:15:14 -03:00

3.2 KiB

Raw Blame History

VaptVupt GUI

Desktop application for vaptvupt backup compression with ML-KEM-768 + X25519 post-quantum hybrid encryption.

Works on GNU/Linux, BSD, macOS, and Windows.

Install

Linux (recommended)

tar xzf vaptvupt-gui.tar.gz && cd vaptvupt-gui
./vaptvupt-gui                      # auto-creates venv, installs PySide6
./install.sh --user              # adds right-click menu integration

Windows

Option A — Installer (recommended):

Download VaptVuptGUI-1.3.0-Setup.exe and run it. Installs to Program Files, adds Start Menu shortcut, desktop shortcut, right-click context menus, and .zupt file association. Includes uninstaller.

Option B — Build from source:

cd packaging\windows
build-windows.bat

Requires Python 3.9+, NSIS 3.x, and a compiled vaptvupt.exe.

Option C — Run directly:

pip install PySide6
python src\zupt_gui.py

macOS / BSD

pip3 install PySide6
python3 src/zupt_gui.py

AppImage (universal Linux)

chmod +x VaptVupt-GUI-1.3.0-x86_64.AppImage
./VaptVupt-GUI-1.3.0-x86_64.AppImage

Flatpak

flatpak-builder --install build packaging/flatpak/dev.zupt.gui.yml
flatpak run dev.zupt.gui

Features

Tab	Function
Keys	Generate ML-KEM-768 + X25519 hybrid keypairs
Compress	All codecs, levels 1-9, dedup, solid, password, PQ keys
Extract	Decrypt and extract .zupt archives
Verify	Check block checksums, view archive metadata
Disk	Full-disk backup and restore
About	Version, cryptographic stack, credits

All tabs support drag-and-drop. Drop a .zupt file anywhere on the window to extract it. Drop any other file to compress it.

System Integration

Linux (Nemo / Cinnamon)

After ./install.sh --user:

Right-click any file: Compress with VaptVupt
Right-click .zupt file: Extract with VaptVupt
Double-click .zupt: opens in VaptVupt GUI

Windows (after installer)

Right-click any file: Compress with VaptVupt
Right-click any folder: Compress with VaptVupt
Double-click .zupt: opens in VaptVupt GUI
Right-click .zupt: Verify Integrity

Architecture

VaptVupt GUI (PySide6, Python)
    |
    |-- subprocess.Popen() with streaming stderr
    |
    v
vaptvupt CLI (Pure C11 binary)
    ML-KEM-768 + X25519 + AES-256-CTR
    VaptVupt / LZHP / Store codecs
    Block deduplication, full-disk backup

The GUI calls the vaptvupt CLI binary — all cryptography runs in native C, not Python.

Packaging

Platform	Format	Tool
Any	pip	`pip install .`
Debian/Ubuntu/Mint	.deb	`packaging/deb/control`
Fedora/RHEL	.rpm	`rpmbuild -ba packaging/rpm/vaptvupt.spec`
Universal Linux	.AppImage	`packaging/appimage/build-appimage.sh`
Sandboxed Linux	.flatpak	`packaging/flatpak/dev.zupt.gui.yml`
Windows	.exe installer	`packaging/windows/build-windows.bat`
Windows	NSIS .exe	`packaging/windows/zupt-installer.nsi`

Credits

vaptvupt v4.2.0 — Cristian Cezar Moisés (github)

License

AGPL-3.0-or-later

3.2 KiB Raw Blame History