Christopher Fahlin 06429cfdb4 fix(fips): add cipher config API, key zeroization, and provider leak guard ...

- Add fips_configure_cipher() to pin FIPS-approved SQLCipher PRAGMAs
  (HMAC-SHA512, PBKDF2-HMAC-SHA512, 256k iterations, 4096-byte pages)
- Call fips_configure_cipher() after sqlite3_key() in JNI and sample app
- Copy key material to OPENSSL_malloc buffer and zeroize with
  OPENSSL_cleanse after use (SP 800-132 §5.3)
- Fix provider leak: unload FIPS provider on EVP_set_default_properties
  failure to prevent silent FIPS bypass
- Delete stale DB before round-trip compliance test
- Add .codegraph/ and .grepai/ to .gitignore
- Document fips_configure_cipher API and key handling in CLAUDE.md

2026-05-09 12:32:48 -07:00

..

fips_init.h

fix(fips): add cipher config API, key zeroization, and provider leak guard

2026-05-09 12:32:48 -07:00

fips_sqlcipher.h

feat: initial project structure

2026-05-04 19:34:28 -07:00

fips_verify.hpp

feat: initial project structure

2026-05-04 19:34:28 -07:00