d429e6e3565f

feat: Derive sync session key from Noise transport (v2.13.19)

- Capture handshake hash in NoiseBridge::into_transport before consuming HandshakeState - Add NoiseTransport::derive_session_key (HKDF-SHA256 over handshake hash with label) - Add TcpManager::derive_session_key for active authenticated connections - Add GET_SESSION_KEY/SESSION_KEY native host messages with peach-sync-entry-key/v1 label - Cover deterministic derivation, initiator/responder agreement, label and session separation, end-to-end authenticated derivation, and unknown-connection error paths Verification: cargo check/test 27/27, npm typecheck, npm test 258/258, npm run build.

time
2026-04-30 14:35 UTC · 6 months ago
machine
koh2
parent
0a69521c91bd
3 files manifest.firefox.json+1 −1manifest.json+1 −1package.json+1 −1
manifest.firefox.json+1 −1
@@ -1,7 +1,7 @@11 {22   "manifest_version": 3,33   "name": "Peach",4-  "version": "2.13.18",4+  "version": "2.13.19",55   "description": "Zero-knowledge password manager",66   "browser_specific_settings": {77     "gecko": {

view file

manifest.json+1 −1
@@ -1,7 +1,7 @@11 {22   "manifest_version": 3,33   "name": "Peach",4-  "version": "2.13.18",4+  "version": "2.13.19",55   "description": "Zero-knowledge password manager",66   "action": {77     "default_popup": "src/popup/index.html",

view file

package.json+1 −1
@@ -1,6 +1,6 @@11 {22   "name": "peach",3-  "version": "2.13.18",3+  "version": "2.13.19",44   "description": "Zero-knowledge password manager",55   "type": "module",66   "scripts": {

view file