mirror of
https://github.com/freemkv/libfreemkv.git
synced 2026-10-07 18:13:10 +00:00
Matthew Jackson
33155eb9bf
Add `aacs::content::unit_key_opens(unit, key, format) -> bool` behind a new non-default `keyproof` feature — one bit (key right/wrong), never plaintext — for a private offline key-resolver (kdb). BD-TS per-packet fast reject, with a decrypt_unit + is_clean fallback for PS/odd units. A not(keyproof)-gated compile_fail door in keys/public_api_cannot_decrypt_aacs pins its absence by default, so the default public API still cannot decrypt AACS (KU §2.2). Also expose test_util::encrypt_unit alongside decrypt_unit for consumer fixtures. Equivalence test pins the fast path to decrypt_unit + is_clean. Version left to the release owner.
26 lines
620 B
Plaintext
26 lines
620 B
Plaintext
/target
|
|
*.swp
|
|
*.swo
|
|
.DS_Store
|
|
.cargo/
|
|
|
|
# session scratch — never track (may contain RE breadcrumbs)
|
|
scratch/
|
|
|
|
# stray local build artifact
|
|
/rust_out
|
|
|
|
# internal agent context — never publish (path AND dir; leak-guard blocks both)
|
|
CLAUDE.md
|
|
.claude/
|
|
|
|
# Nightly harness output. Written into the repo it audits, and it embeds
|
|
# absolute paths from the machine that ran it — which must never reach a public
|
|
# repo. Ignored rather than relocated so a run from any working copy is safe.
|
|
.nightly/
|
|
|
|
# cargo-mutants working output: large, machine-specific, never committed
|
|
mutants.out/
|
|
mutants.out.old/
|
|
.cargo/config.toml
|