5050570b23
Version bumped to 5.0.0 across include/zupt.h, all packaging recipes, man page, and docs. Audit fixes (pre-5.0.0 review): - src/zupt_format.c: overflow-safe bound in the solid-mode `test` path (off+sz could wrap and drive an OOB read in zupt_xxh64 on a crafted archive; the extract path was already hardened, the test path was not). - gui: run_async now marshals the completion callback onto the GUI thread with QueuedConnection (a bare functor connected DirectConnection and touched widgets off the worker thread); Extract auto-detect note survives the log clear via a new `info` param. - .github/workflows/ci.yml: trigger on `master` (was main/develop, so CI never ran); `make dist` tarball is vaptvupt-*.tar.gz not zupt-*; the ASAN PQ round-trip uses native --pq (was --pq-sdk, which fails on the source-only build and blocked the release job). Documentation: - New AUDIT.md (methodology, FIPS 203 conformance validation, findings, repro). - CHANGELOG 5.0.0 entry covers the FIPS 203 conformance fix + BREAKING note and the GUI/CLI/security/packaging work. - README "What's new in 5.0.0", download tables (incl. Windows/macOS/BSD + portable GUI), version-history row. - SECURITY.md + THREAT_MODEL.md: ML-KEM-768 documented as FIPS 203, validated byte-for-byte against OpenSSL 3.5. - Accuracy fixes: man page (--kdf default is PBKDF2 on source-only; codec 2.60.4), rpm %description, debian control/copyright, homebrew header (no vendored library on source-only builds). make check 16/16 (FIPS 203 conformance 3/3, all distro-safe checks).
143 lines
6 KiB
RPMSpec
143 lines
6 KiB
RPMSpec
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#
|
|
# Fedora / RHEL / CentOS RPM spec for vaptvupt.
|
|
#
|
|
# Build with:
|
|
# spectool -g vaptvupt.spec # fetches the upstream tarball
|
|
# rpmbuild -ba vaptvupt.spec # builds source + binary RPMs
|
|
#
|
|
# To bring a release into production:
|
|
# 1. Run `make dist` upstream → /tmp/vaptvupt-VERSION.tar.gz (reproducible).
|
|
# 2. Upload to a stable release URL (git.securityops.co releases).
|
|
# 3. Update %{version} below.
|
|
# 4. Run `sha256sum /tmp/vaptvupt-VERSION.tar.gz` and update Source0
|
|
# checksum (handled by spectool when configured) or pin via
|
|
# sha256sum in a separate manifest if your distro requires it.
|
|
# 5. rpmbuild --define '_topdir ~/rpmbuild' -ba zupt.spec
|
|
#
|
|
# This spec is written for Fedora 38+ and EPEL 9+; it should also work
|
|
# on RHEL 8 (with EPEL) by adjusting BuildRequires if Python 3.8+ isn't
|
|
# in the base.
|
|
|
|
Name: vaptvupt
|
|
Version: 5.0.0
|
|
Release: 1%{?dist}
|
|
Summary: Post-quantum backup compression utility (AES-256 + ML-KEM-768 + Argon2id, formerly Zupt)
|
|
|
|
License: AGPL-3.0-or-later AND GPL-3.0-or-later
|
|
URL: https://git.securityops.co/cristiancmoises/vaptvupt
|
|
Source0: %{url}/releases/download/v%{version}/%{name}-%{version}.tar.gz
|
|
|
|
# v3.0.0: legacy `zupt` package is superseded. Renaming was forced
|
|
# by a prior INPI Brasil trademark registration on "Zupt". The
|
|
# archive extension (.zupt), wire format, magic bytes, and C ABI
|
|
# are unchanged.
|
|
Provides: zupt = %{version}-%{release}
|
|
Obsoletes: zupt < 3.0.0
|
|
Conflicts: zupt < 3.0.0
|
|
|
|
BuildRequires: gcc
|
|
BuildRequires: make
|
|
BuildRequires: glibc-devel
|
|
BuildRequires: python3 >= 3.8
|
|
# python3 is only needed for the regression-test harness (byte sweeps,
|
|
# tamper injection). The shipped binary has no Python dependency.
|
|
|
|
Requires: glibc
|
|
|
|
%description
|
|
Zupt is a pure-C11 backup compression utility featuring:
|
|
|
|
* Post-quantum hybrid encryption (ML-KEM-768 + X25519, FIPS 203,
|
|
validated byte-for-byte against OpenSSL's ML-KEM-768) and full
|
|
pure ML-KEM-768 (--pq-only)
|
|
* AES-256-CTR + HMAC-SHA256 authenticated encryption (Encrypt-then-MAC)
|
|
* PBKDF2-SHA256 password key derivation (Argon2id in WITH_SDK=1 builds)
|
|
* Multi-threaded compression with the VaptVupt LZ + ANS codec
|
|
* Full-disk backup and restore with sparse-region detection
|
|
* End-to-end byte-level tamper detection on encrypted archives
|
|
(0 silent-accept positions in the v1.6 exhaustive byte sweep)
|
|
* Constant-time cryptographic primitives verified with Jasmin
|
|
* NIST/RFC test vectors for SHA-256, SHA-3, ML-KEM-768, AES-256-CTR,
|
|
HMAC-SHA256, X25519, PBKDF2, Argon2id
|
|
|
|
The archive format includes an integrity trailer that authenticates
|
|
the header and footer, per-block HMAC with bound frame-preface AAD,
|
|
and optional encrypted comments.
|
|
|
|
%global debug_package %{nil}
|
|
# Single source RPM, no -debuginfo split for the initial release.
|
|
|
|
%prep
|
|
%autosetup -n %{name}-%{version}
|
|
|
|
%build
|
|
# Source-only build (WITH_SDK=0): no vendored libraries, no external crypto
|
|
# dependency. Fedora's default optflags plus the project's warning set.
|
|
%make_build WITH_SDK=0 \
|
|
CFLAGS="%{optflags} -fPIE -Wall -Wextra -std=c11 -Iinclude -Isrc" \
|
|
LDFLAGS="%{?build_ldflags} -pie" \
|
|
LDLIBS="-lm -lpthread"
|
|
|
|
%check
|
|
# Distro-safe regression subset: F-06 HMAC trials, F-08 top-MAC sweep,
|
|
# F-09 byte sweep, F-10..F-12 regressions, the dedup-nonce regression,
|
|
# and NIST/RFC vectors. Skips threaded/dist-reproducibility tests that
|
|
# are sensitive to the build host.
|
|
%make_build WITH_SDK=0 \
|
|
CFLAGS="%{optflags} -fPIE -Wall -Wextra -std=c11 -Iinclude -Isrc" \
|
|
LDFLAGS="%{?build_ldflags} -pie" \
|
|
LDLIBS="-lm -lpthread" \
|
|
check
|
|
|
|
%install
|
|
%make_install WITH_SDK=0 DESTDIR=%{buildroot} PREFIX=/usr
|
|
|
|
%files
|
|
%license LICENSE
|
|
%doc README.md SECURITY.md CHANGELOG.md
|
|
%{_bindir}/%{name}
|
|
%{_bindir}/zupt
|
|
%{_datadir}/bash-completion/completions/%{name}
|
|
%{_datadir}/bash-completion/completions/zupt
|
|
%{_datadir}/zsh/site-functions/_%{name}
|
|
%{_datadir}/zsh/site-functions/_zupt
|
|
%{_datadir}/fish/vendor_completions.d/%{name}.fish
|
|
%if 0%{?_mandir:1}
|
|
%{_mandir}/man1/%{name}.1*
|
|
%{_mandir}/man1/zupt.1*
|
|
%endif
|
|
|
|
%changelog
|
|
* Fri Jul 10 2026 Cristian Cezar Moisés <sac@securityops.co> - 5.0.0-1
|
|
- ML-KEM-768 is now genuinely FIPS 203-conformant (was round-3 CRYSTALS-Kyber):
|
|
fixed a transposed matrix-A sampling convention, the round-3 KDF, and the
|
|
implicit-rejection domain. Validated byte-for-byte against OpenSSL 3.5's
|
|
FIPS 203 ML-KEM-768 (tests/test_mlkem_fips203.sh, run in %%check).
|
|
- BREAKING: --pq / --pq-only keys and archives from <= 4.2.1 no longer decrypt.
|
|
Regenerate keys and re-encrypt. Password mode / plain compression unaffected.
|
|
- Security: compress data-loss + silent-plaintext guards; AVX2 decoder heap
|
|
OOB-read bound; overflow-safe solid-mode test path; secret-wipe on error.
|
|
- GUI reworked for the source-only build; truthful banner/help.
|
|
|
|
* Fri Jul 10 2026 Cristian Cezar Moisés <sac@securityops.co> - 4.2.1-1
|
|
- Fix: "vaptvupt info" mislabelled full post-quantum (--pq-only) archives as
|
|
"PQ Hybrid (ML-KEM-768 + X25519)". info now reads the real enc_type from the
|
|
encryption-header block and reports the actual mode ("ML-KEM-768 only, no
|
|
classical layer" for --pq-only). Reader-side only; no wire-format change.
|
|
|
|
* Thu Jul 09 2026 Cristian Cezar Moisés <sac@securityops.co> - 4.2.0-1
|
|
- New native full (pure) post-quantum mode --pq-only: ML-KEM-768 as the
|
|
sole KEM, no classical X25519 (envelope 0x06). For "PQ-only" compliance
|
|
postures; hybrid --pq remains the recommended default. In-tree crypto.
|
|
- Security (critical): fixed AES-256-CTR keystream reuse under --dedup
|
|
(every block now uses a fresh random 128-bit nonce). Re-encrypt any
|
|
--dedup encrypted archives written by <= 4.1.0.
|
|
- Clearer keygen --sdk/--box guidance on source-only builds.
|
|
- Wire format v1.6 unchanged.
|
|
|
|
* Tue May 20 2025 Cristian Cezar Moisés <sac@securityops.co> - 2.4.4-1
|
|
- Initial Fedora/EPEL RPM package.
|
|
- Tracks upstream v2.4.4: distribution packaging release; archive
|
|
format unchanged from v2.4.3 (v1.6, 0/1878 silent-accept byte
|
|
tampers).
|