diff options
| author | cirakg <cirakg@cirakg.xyz> | 2026-10-20 06:56:58 +0200 |
|---|---|---|
| committer | cirakg <cirakg@cirakg.xyz> | 2026-10-20 06:56:58 +0200 |
| commit | 93d0becabf76aaa568989f295ca9b8a2c387f0cc (patch) | |
| tree | 14adc56b77d791ebe387c411f7de65063119df0e /docs/SECURITY.md | |
| parent | f455246fde086dda0cb61b92c84a5146a831a2bf (diff) | |
docs: record M6b (QR) results
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'docs/SECURITY.md')
| -rw-r--r-- | docs/SECURITY.md | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/docs/SECURITY.md b/docs/SECURITY.md index 45faba6..31723d5 100644 --- a/docs/SECURITY.md +++ b/docs/SECURITY.md @@ -18,13 +18,12 @@ Everything lives in the app's private `Application.Storage`: | `lk` | dictionary | Wrong-PIN state: `f` failures, `d` delay in seconds, `t` trusted time of the last attempt; absent after a success | `Lockout` | | `e.<id>` | bytes | One entry record (format below) | `Vault` | | `p.<id>` | bytes | Pending locked entry: a record sealed with the device key | `Vault` | +| `x.<id>` | bytes | Encoded 2D barcode: a SealedBox (aad `OTPW-X-1` + ID) with the entry's own key (device key, or the master key for locked entries) of width, height, quiet zone and the packed modules. Deleted when the entry is updated, removed or erased | `Vault` | | `imp`, `imp.<n>` | dictionary, bytes | Waiting multi-part import: `imp` = `{"n": chunks, "t": saved at}`, `imp.<n>` = chunks of one SealedBox (device key, aad `OTPW-IMP-1`) of the text | `ImportBuffer` | | `res` | dictionary | Latest settings results (`l` lines, `u` unseen) | `Results` | | `fh` | array | Hashes (SHA-256, first 8 bytes) of the last 32 applied settings forms | `SettingsProcessor` | | `st` | array | Version and day of the last passed self-test | `AppState` | -`x.<id>` (barcode cache) arrives with M6. - The PIN wrap and the lockout state have their own keys instead of living in `m` as README 6.2 first planned. Each wrong PIN rewrites the lockout state before the check, and a small separate value makes that write cheap and keeps it from risking the entry index. ## Keys |