wt/Luma - Luma - Gitea: Git with a cup of tea

109 Commits 2 Branches 1 Tag

1 Commits

Include renames

Author	SHA1	Message	Date
wt	b0eb44d7a7	#7 add SCRAM-SHA-512 and document TLS 1.3 support iOS CI / Build and Test SwiftUI App (push) Canceled after 0s Details Build Unsigned iOS and macOS Apps / Build Unsigned iOS IPA (push) Canceled after 0s Details Build Unsigned iOS and macOS Apps / Build macOS ZIP (push) Canceled after 0s Details - Implement SCRAM-SHA-512 (RFC 5802 with SHA-512) as a Luma-side SaslMechanism and register it ahead of Martin's SHA-256/SHA-1/PLAIN, so modern servers preferring SHA-512 authenticate with it. - Verify the math against Python-computed reference vectors (salted password, client proof, server signature) in SCRAMSHA512Tests and guard the mechanism registration in Scripts/verify.sh. - Confirm the TLS stack negotiates TLS 1.3 (negotiatedSSL + ALPN via SecureTransport, handshake verified against a TLS 1.3-only server) and document the TLS/SCRAM posture in SECURITY.md.	2026-08-29 05:30:30 +07:00

Author

SHA1

Message

Date

wt

b0eb44d7a7

#7 add SCRAM-SHA-512 and document TLS 1.3 support

iOS CI / Build and Test SwiftUI App (push) Canceled after 0s

Details

Build Unsigned iOS and macOS Apps / Build Unsigned iOS IPA (push) Canceled after 0s

Details

Build Unsigned iOS and macOS Apps / Build macOS ZIP (push) Canceled after 0s

Details

- Implement SCRAM-SHA-512 (RFC 5802 with SHA-512) as a Luma-side
  SaslMechanism and register it ahead of Martin's SHA-256/SHA-1/PLAIN,
  so modern servers preferring SHA-512 authenticate with it.
- Verify the math against Python-computed reference vectors (salted
  password, client proof, server signature) in SCRAMSHA512Tests and
  guard the mechanism registration in Scripts/verify.sh.
- Confirm the TLS stack negotiates TLS 1.3 (negotiatedSSL + ALPN via
  SecureTransport, handshake verified against a TLS 1.3-only server)
  and document the TLS/SCRAM posture in SECURITY.md.

2026-08-29 05:30:30 +07:00