Round 4 security remediation: storage key scrubbing, CTAP2 truncation, OOB read, cipher-rotation bypass - #582

Merged

BitHighlander merged 6 commits into

alphafrom

fix/round4-storage-secrets

Aug 25, 2026

Commits on Aug 25, 2026

fix(storage): scrub AES iv/key-schedule and authdata key material on all paths
BitHighlander
committed
339f5d1
fix(u2f): refuse a CTAP2 rp_id too long to fully display (#578)
BitHighlander
committed
0a32516
fix(fsm): scrub CipherKeyValue derived key material (#579)
BitHighlander
committed
a35e49f
fix(transaction): size node_str to txin_check's ADDR_STR_LEN contract (#580)
BitHighlander
committed
2b62d08
fix(recovery): preserve real cipher bytes across a backspace (#581, #584)
BitHighlander
committed
758cfe4
test(solana,ripple): add #550/#553 boundary regressions requested before #557 merged
BitHighlander
committed
97f0512