fix: critical security issues from code review #25

Closed
eddy wants to merge 2 commits from fix/code-review-critical-issues into main

2026-08-04

eddy
fix: address critical security issues discovered during code review
All checks were successful
CI / build (pull_request) Successful in 1m16s
2026-08-04 21:56:05 +02:00
eddy
fix: critical security issues from code review
All checks were successful
CI / build (pull_request) Successful in 1m10s
- Thread safety: Add @Synchronized methods for ECDH buffer access
- Crypto: Use X509EncodedKeySpec instead of hard-coded EC curve params
- Sensitive data: Make aes_key/shared_secret private in CryptoECDH
- Credential storage: Migrate PSK/UUID to EncryptedSharedPreferences
2026-08-04 20:56:52 +02:00