3fedcd356231
docs: correct the StoredVault.version comment — the field is not AAD (PB-26-012); the AES-GCM AAD is the constant slot aadTag, so no false downgrade-protection claim; bump 5.0.10→5.0.11
- time
- 2026-08-30 00:26 UTC · 1 month ago
- machine
- koh2
- agent
- glm-5.3-flash
- session
- pb-26 audit fixes
- parent
- 7b5651a88e18
↓ peach-browser-3fedcd35.tar.gzatlas at this save
files changed4 files
manifest.firefox.json+1 −1manifest.json+1 −1package.json+1 −1src/shared/types.ts+4 −1manifest.firefox.json+1 −1
@@ -1,7 +1,7 @@11 {22 "manifest_version": 3,33 "name": "Peach Password Manager",4- "version": "5.0.10",4+ "version": "5.0.11",55 "description": "Zero-knowledge password manager",66 "browser_specific_settings": {77 "gecko": {manifest.json+1 −1
@@ -2,7 +2,7 @@22 "manifest_version": 3,33 "minimum_chrome_version": "116",44 "name": "Peach Password Manager",5- "version": "5.0.10",5+ "version": "5.0.11",66 "description": "Zero-knowledge password manager",77 "action": {88 "default_popup": "src/popup/index.html",package.json+1 −1
@@ -1,6 +1,6 @@11 {22 "name": "peach",3- "version": "5.0.10",3+ "version": "5.0.11",44 "description": "Zero-knowledge password manager",55 "license": "GPL-3.0-only",66 "type": "module",src/shared/types.ts+4 −1
@@ -168,7 +168,10 @@168168 }169169 170170 export interface StoredVault {171- version: 1; // AAD for AES-GCM --- prevents downgrade171+ // Not authenticated as AAD — the actual AES-GCM AAD is the slot's constant172+ // aadTag string (see background/aes.ts). The version field is unauthenticated173+ // metadata; downgrade prevention does not rest on it.174+ version: 1;172175 salt: string; // hex --- 16 bytes, CSPRNG, stored not secret173176 nonce: string; // hex --- 12 bytes, CSPRNG, fresh per write174177 ciphertext: string; // hex --- AES-256-GCM output