cipherbird 1.1.1

Native cryptography for Flutter over dart:ffi: hashing, AEAD, post-quantum, hybrid KEM, sealed messaging, Noise, recipes and easy-mode keys, engine bundled.

1.1.1

Engine hardening and smaller binaries; no API or wire-format change.

• Vault packets whose signature is not 64 bytes are rejected before verification, in packet parsing and in the symmetric and asymmetric vault open paths; a short signature previously reached the verifier and could crash the process. The asymmetric vault also checks the sender, recipient and secret key lengths on seal and open.
• Length arithmetic in the suite, session and Flagship parsers is done in size_t, so a signature or ciphertext length near 2^32 can no longer wrap a bounds check. The suite requires the exact hybrid signature size. Regression tests cover both findings and the related short-input cases.
• Every shipped binary is rebuilt with libsodium 1.0.22 and OpenSSL 3.5.9 (3.5 LTS). OpenSSL is trimmed to the EVP ciphers the engine uses, liboqs carries only the algorithms the API exposes, and the secp256k1 table is smaller. Android arm64 goes from 7.5 MB to 4.9 MB, x86_64 from 8.3 MB to 6.3 MB, iOS from 7.6 MB to 5.0 MB, macOS from 7.8 MB to 5.2 MB; the WebAssembly engine is 4.4 MB.
• The C ABI is unchanged at 265 functions and the generated web shim is identical to 1.1.0.
• await CipherBird.preload() is now cheap everywhere. Natively it returns immediately instead of warming the library on an isolate; the library opens synchronously on first use. In the browser Flutter's plugin registration starts fetching and compiling the engine before main runs, so preload only joins a download already in flight. With the cipherbird.js and new cipherbird_boot.js script tags in index.html the page instantiates the engine during Flutter's bootstrap and the package adopts it synchronously, so the await can be dropped on the web as well; dart run cipherbird:web_setup adds the tags to web/index.html. Concurrent loads are shared. CipherBird.ready is the same future for code that runs after main.

1.1.0

Web support. The engine is compiled to WebAssembly with Emscripten and bundled as assets/cipherbird.js and assets/cipherbird.wasm; the same Dart API runs in the browser under both flutter build web and flutter build web --wasm, with byte-compatible envelopes, signatures and keys. CipherBird.preload() loads the engine and is required on the web; it takes an optional library location (a file path natively, the URL of cipherbird.js on the web). File-path APIs are unavailable in the browser. AES-256-GCM gained a portable OpenSSL path for CPUs without AES instructions, byte-identical to the hardware path.

Off-thread work is now described by CipherBirdJob, plain data a runner can copy into an isolate or post to a worker. CipherBirdRunner.run takes a job instead of a function and a message, and the three Argon2id jobs behind the asynchronous easy-mode helpers are public (Argon2DeriveJob, Argon2HashJob, Argon2VerifyJob). In the browser CipherBirdIsolateRunner runs jobs in a web worker shipped as assets/cipherbird_worker.js, so password hashing no longer blocks the page.

1.0.0

First release under the name cipherbird. The package was previously cryptolib_flutter (last version 4.3.0); the API, the bundled binaries and the wire formats are unchanged. The Dart entry point stays CipherBird, the name of the native library this package binds.

4.3.0

Package structure and conventions.

Changed

• lib/src now follows one declaration per file with a 100-line limit, no else branches and no inline comments; test/conventions_test.dart enforces it. Native lookups live in per-domain holders resolved lazily; the large extensions are split into named chunks (CipherBirdBbsProofGen, CipherBirdRecipeSealing, ...) that the barrel re-exports, so every method is still reachable from one import.
• CipherBird.preload() runs through a CipherBirdRunner (CipherBirdIsolateRunner by default, CipherBirdInlineRunner for tests). Await it in main before runApp.
• Data classes use const factory redirects and final class.
• Documentation and strings use plain ASCII; CipherBirdRecipe.describe() joins layers with ->.

Added

• lib.easy.symmetricKeyFromPassphraseAsync, hashPasswordAsync and verifyPasswordAsync run Argon2id on a worker through a CipherBirdRunner.

4.2.0

Easy mode: developer-friendly sugar on top of the full API.

Added

• Bytes/text extensions: 'text'.bytes, 'ab12'.hexBytes, '…'.base64Bytes, bytes.hex / .base64 / .base64Url / .text, bytes.constantTimeEquals(), bytes.concat(), bytes.wipe(), List<int>.u8, KeyPairResult.publicHex.
• SymmetricKey — 32-byte key with key-committing AEAD encryption, encryptText/decryptText, Argon2id fromPassphrase(salt:), HKDF derive(purpose), hex/base64 (de)serialisation, asKeySource for recipes, destroy().
• SigningKey / VerifyKey — Ed25519 or the Ed25519+ML-DSA-65 hybrid behind one algorithm: argument; signText/verifyText; scheme for recipes.
• KemKeyPair — hybrid X25519+ML-KEM-768 encapsulate/decapsulate to a SymmetricKey, and one-call public-key encryption encryptFor/decrypt (encryptTextFor/decryptText).
• Identity.sealText / openText for the Flagship/Fortress sealed messaging.
• lib.easy — factories for the above plus hashPassword/verifyPassword (Argon2id PHC strings), randomBytes/randomHex/token, sha256Hex.

Every easy-mode class takes an optional CipherBird and defaults to CipherBird.instance. Composition only — no new cryptography.

4.1.0

Extensible recipes: mix your own encryption into a CipherBirdRecipe.

Added

• ProtectionLayer is now an abstract class you can subclass (id, wireName, seal, open) and register with ProtectionLayer.register(). The four built-ins (xchacha20Poly1305, aes256Gcm, committing, molecular) are instances of the same base.
• CascadeLayer — a layer that is itself a mixture of layers, so several ciphers (built-in or custom) become ONE custom layer; cascades nest.
• KeySource (abstract) with RawKeySource, PassphraseKeySource, KeyFileSource; CipherBirdRecipe.withKeySource() accepts your own (token, KMS, keyring unlock).
• SignatureScheme (abstract) with Ed25519Signature, HybridSignature; CipherBirdRecipe.signedWith() / verifiedWith() accept your own.
• Guardrails: ids 0–127 are reserved for the library (custom parts must use 128–255, enforced); a key source must return exactly 32 bytes; a layer's wireName feeds its HKDF sub-key; the envelope pins the key-source id and the signature-scheme id.

Packaging

• First pub.dev-ready release: the prebuilt native binaries (Android arm64-v8a + x86_64 .so, iOS device + simulator and macOS CipherBird frameworks) are committed and included in the published archive, rebuilt against the current 265-function C ABI. Real LICENSE (MIT, credit to the author required), repository links, declared platforms (Android, iOS 15+, macOS 12+ on Apple silicon).

Changed

• verifiedBy(pk) no longer takes an algorithm argument — the envelope records which built-in scheme signed it. A custom scheme must be supplied with verifiedWith().
• The wire format is unchanged: envelopes sealed by 4.0.0 open unchanged, and cross-language interop stays byte-identical.

4.0.0

Full parity with the native C ABI, type-safe algorithm selectors, and a grouped API for navigating the surface.

Breaking

• Algorithm selectors are now enums instead of bare int wire values. Every affected call site must be updated:

  Before	After
  mlKemKeygen(1)	mlKemKeygen(MlKemLevel.level768)
  mlDsaKeygen(1)	mlDsaKeygen(MlDsaLevel.level65)
  slhDsaKeygen(3, 1)	slhDsaKeygen(SlhDsaLevel.fast192, SlhDsaHash.shake)
  hpkeSetupS(1, 3, 0, …)	hpkeSetupS(HpkeKdf.sha256, HpkeAead.chaCha20Poly1305, HpkeMode.base, …)

  HpkeKdf, HpkeAead and HpkeMode were classes of static const int; they are now real enums, so the constants keep their names but change type.

• SealedInfo.suite is a SealedTier rather than an int (1/2). Compare against SealedTier.flagship / SealedTier.fortress. SealedTier now carries an explicit wire value instead of relying on declaration order.

• Argon2id cost is a KdfPreset rather than 0/1, on vaultCreate, vaultFromEntropy and keyringAddPassphraseSlot.

Added — features that had no Dart binding

The plugin bound 218 of the 250 C ABI functions; it now binds all 244 that are callable (the remaining 6 are struct-level *_free calls, deliberately unbound because the buffer helpers already free those allocations).

• Stateful RNGs — Drbg (HMAC-DRBG, SP 800-90A) and Fortuna, via lib.rng.drbg(...) / lib.rng.fortuna(). Both hold native handles; call close() when done.
• Keyed and encrypted steganography — stegoEmbedKeyed, stegoExtractKeyed, stegoEmbedEncrypted, stegoExtractDecrypt.
• Carrier diagnostics — stegoInspect (→ StegoFileInspection), stegoDetectHidden (→ StegoHiddenDataReport), stegoContentDigest.
• Entropy-source health — assessFileHealth (→ HealthReport), the SP 800-90B style checks.
• Composed carriers — physicalSeal/physicalOpen, imageFactorSeal/imageFactorOpen, hpkeStegoSeal/hpkeStegoOpen.
• Forward error correction — fecEncode/fecDecode with FecScheme.

Added — maximal security and composition

• SecurityProfile (balanced / high / maximum) sets every algorithm parameter together — ML-KEM/ML-DSA/SLH-DSA parameter sets, sealed tier, HPKE suite, Argon2id cost and the AEAD cascade. maximum takes the strongest option at every choice, so a maximal KEM can no longer be paired with an interactive-cost KDF by accident.

• CipherBirdRecipe composes the library's protections instead of exposing them one call at a time:

  final recipe = lib.maximumSecurity()
      .withPassphrase('correct horse battery staple')
      .signedBy(id.secretKey, algorithm: SignatureAlgorithm.hybrid)
      .verifiedBy(id.publicKey)
      .withFec(FecScheme.repetition3);
  
  final envelope = recipe.seal(secret);
  recipe.sealIntoCarrier(secret, coverPath: cover, outputPath: out);
  

  Key sources: a passphrase (Argon2id), a raw 32-byte key, or a media file (reproducible). Layers: XChaCha20-Poly1305, AES-256-GCM, key-committing AEAD, or a whole MolecularVault as one layer. Then optional signing, forward error correction, and concealment in a carrier.

  Composition only — every step is an existing vetted operation. What the recipe adds is the plumbing that is easy to get wrong by hand: each layer gets its own HKDF-separated key, the recipe descriptor is authenticated as AAD by every layer, the order is fixed rather than caller-selectable, and everything fails closed. describe() prints the configuration for review. The envelope is a library-native format, not a standard.

Added — organisation

• Grouped API. Each domain is reachable through a named group, so autocomplete narrows to one area instead of listing ~200 members:

  lib.pq.mlKem.keygen(MlKemLevel.level768);
  lib.stego.detectHidden(path);
  lib.rng.drbg(entropy);
  lib.hash.sha256(bytes);
  

  Groups: hash, aead, asym, pq (with mlKem, mlDsa, slhDsa, hybridKem, hybridSig, sntrup), bls, vault, keyring, entropy, stego, composed, chain, suite, sealed, session, frost, hpke, ecvrf, bbs, oprf, opaque, rng.

  These are zero-cost extension type views over the same instance. The existing flat methods are unchanged and remain fully supported — neither style is deprecated.

• New result types — StegoFileInspection, StegoHiddenDataReport, HealthReport, plus the MediaFormat and FecScheme enums.

• MlKemLevel / MlDsaLevel / SlhDsaLevel expose bits, nistCategory and fastVariant so a parameter set can be inspected, not just passed along.

3.0.0

• Initial release: hashing, AEAD, asymmetric, vaults, post-quantum (ML-KEM/ML-DSA/SLH-DSA), hybrid KEM, BLS, keyring, sealed messaging, FROST, HPKE, ECVRF, BBS, OPRF and OPAQUE over dart:ffi.