Harden CryptographicFailures verification against guessing - #214

Open

overscr wants to merge 8 commits into

OWASP-CTF:dc34-ctffrom

overscr:probe/crypto-clean

Commits on Aug 9, 2026

docs: trim trailing whitespace
overscr
committed
1d3f9c4
Fix cryptographic failures: one-way storage, no offline oracle, and a guess ceiling
overscr
committed
f8452fb
Fix LDAP injection: escape filter input and require verified credentials
overscr
committed
c255d4c
Draw cryptographic-failures decoy material fresh per boot
overscr
committed
0c5c943
Remove the retired weak-cipher and weak-digest implementations entirely
overscr
committed
5ed5f38
Stop encrypting the level 10 password; hash it like every other level
overscr
committed
3869827
Mark cryptographic-failures verification responses as non-cacheable
overscr
committed
d0ce106
Stop rendering cryptographic-failures response text via innerHTML
overscr
committed
7634663