Files
Christopher Fahlin 06429cfdb4 fix(fips): add cipher config API, key zeroization, and provider leak guard
- Add fips_configure_cipher() to pin FIPS-approved SQLCipher PRAGMAs
  (HMAC-SHA512, PBKDF2-HMAC-SHA512, 256k iterations, 4096-byte pages)
- Call fips_configure_cipher() after sqlite3_key() in JNI and sample app
- Copy key material to OPENSSL_malloc buffer and zeroize with
  OPENSSL_cleanse after use (SP 800-132 §5.3)
- Fix provider leak: unload FIPS provider on EVP_set_default_properties
  failure to prevent silent FIPS bypass
- Delete stale DB before round-trip compliance test
- Add .codegraph/ and .grepai/ to .gitignore
- Document fips_configure_cipher API and key handling in CLAUDE.md
2026-05-09 12:32:48 -07:00

133 lines
1.6 KiB
Plaintext

# OS specific
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
Icon?
ehthumbs.db
Thumbs.db
# Build & Distribution
build/
dist/
out/
/out/android/
/out/ios/
# Compiled Object files
*.slo
*.lo
*.o
*.obj
# Precompiled Headers
*.gch
*.pch
# Compiled Dynamic libraries
*.so
*.dylib
*.dll
# Compiled Static libraries
*.lai
*.la
*.a
*.lib
# Executables
*.exe
*.out
*.app
# CMake generated files
CMakeCache.txt
CMakeFiles/
CMakeScripts/
cmake_install.cmake
install_manifest.txt
Makefile
_deps/
*.cmake
!/cmake/*.cmake
!CMakeLists.txt
# IDEs - General
.idea/
.vscode/
*.swp
*.swo
*.iml
*.iws
.project
.settings/
.classpath
# Xcode / iOS
DerivedData/
*.pbxuser
!default.pbxuser
*.mode1v3
!default.mode1v3
*.mode2v3
!default.mode2v3
*.perspectivev3
!default.perspectivev3
xcuserdata/
*.xccheckout
*.moved-aside
*.xcscmblueprint
*.xcuserstate
*.xcresult
# Android / Gradle
.gradle/
local.properties
.cxx/
captures/
*.keystore
!debug.keystore
assetPack/
build/
**/build/
*.apk
*.aar
*.bundle
# Project Specific Staged artifacts
# Note: These are generated by bootstrap/staging scripts
tests/android-fips/gradlew
tests/android-fips/gradlew.bat
tests/android-fips/gradle/wrapper/gradle-wrapper.jar
tests/android-fips/app/src/main/jniLibs/
tests/android-fips/app/src/main/cpp/include/
tests/android-fips/app/src/main/assets/fips/
samples/android/app/src/main/jniLibs/
samples/android/app/libs/
samples/android/app/build/
samples/android/.gradle/
samples/android/local.properties
# mise
.mise.local.toml
# grepai
.grepai/
# codegraph
.codegraph/
# Secrets & Config
.env
.env.*
!.env.example
# Logs
*.log
# Tags
tags
TAGS