Fix/crypto audit hardening - #2002

Merged

eleboucher merged 10 commits into

devfrom

fix/crypto-audit-hardening

Aug 30, 2026

Commits on Aug 30, 2026

fix(crypto): tolerate unparseable member ids and reject unusable timeouts
eleboucher
committed
c79163e
fix(crypto): make opening and releasing the engine atomic across the push and webview paths
eleboucher
committed
6f6154d
fix(crypto): match upstream on to-device drops, room-key forwarding and unknown devices
eleboucher
committed
4097e09
fix(crypto): match upstream on backup completion, secret storage writes and gossip errors
eleboucher
committed
0391e50
fix(crypto): keep room key requests disabled and report real restore progress
eleboucher
committed
4fb7eeb
fix(crypto): retry outgoing requests and serialize key claims and room encryption
eleboucher
committed
a9eaf55
fix(crypto): validate the stored backup key and settle a cancelled SAS flow
eleboucher
committed
f1b531a
test(crypto): port upstream's request, encryption and cross-signing cases
eleboucher
committed
f411d96
fix(crypto): stop claiming the server has no fallback keys and honour the caller's trust requirement
eleboucher
committed
417c658
feat(crypto): fetch missing session keys from backup and ask other devices for secrets
eleboucher
committed
6c0e899