Security Scan — 2026-05-30

SECURITY_DEFER.md

@@ -5,8 +5,8 @@ Description: The current Argon2id memory cost is set to 64MB (m_cost=65536). Sec
 Why not fixed: no-touch zone
 Suggested fix: Update Argon2id Params in derive_key and derive_key_v3 to use m_cost=262144.
 First detected: 2026-05-09
-Last attempted: 2026-05-23
-Attempt count: 2
+Last attempted: 2026-05-30
+Attempt count: 3
 ---
 [UNEXPECTED_PANICS] - Unhandled unwrap() calls in crypto-adjacent paths
 Severity: Medium
@@ -15,8 +15,8 @@ Description: Multiple uses of .unwrap() or .unwrap_or_else() on locks/IO results
 Why not fixed: no-touch zone
 Suggested fix: Replace .unwrap() with proper error handling using CryptoError or .expect() with descriptive panic messages.
 First detected: 2026-05-09
-Last attempted: 2026-05-23
-Attempt count: 2
+Last attempted: 2026-05-30
+Attempt count: 3
 ---
 [RUSTSEC-2024-0436] - Unmaintained dependency: paste
 Severity: Medium
@@ -25,8 +25,8 @@ Description: The `paste` crate is no longer maintained. While it's a macro-utili
 Why not fixed: no-touch zone (Cargo.lock modification restricted)
 Suggested fix: Replace `paste` with `pastey` or `with_builtin_macros`.
 First detected: 2026-05-09
-Last attempted: 2026-05-23
-Attempt count: 2
+Last attempted: 2026-05-30
+Attempt count: 3
 ---
 [TMP_PATH_FALLBACK] - Unsafe fallback in tmp_path for paths without filenames
 Severity: Medium
@@ -35,6 +35,16 @@ Description: In `tmp_path`, if the destination path lacks a filename (e.g., root
 Why not fixed: no-touch zone
 Suggested fix: Provide a safe fallback filename like "output" or "file" when `file_name()` is None.
 First detected: 2026-05-23
-Last attempted: 2026-05-23
+Last attempted: 2026-05-30
+Attempt count: 2
+---
+[CLIPPY_MANUAL_IS_MULTIPLE_OF] - Manual implementation of .is_multiple_of()
+Severity: Medium
+Location: neuron-encrypt/src/crypto.rs:489,898
+Description: Clippy identifies manual implementations of `.is_multiple_of()` using the modulo operator. While not a security vulnerability itself, it violates the project's quality standard (Clippy deny-level warnings).
+Why not fixed: no-touch zone
+Suggested fix: Replace `chunk_counter % INTERVAL == 0` with `chunk_counter.is_multiple_of(INTERVAL)`.
+First detected: 2026-05-30
+Last attempted: 2026-05-30
 Attempt count: 1
 ---

android/app/src/main/kotlin/com/neuronencrypt/app/MainActivity.kt

@@ -49,8 +49,7 @@ class MainActivity : ComponentActivity() {
                     composable("home") {
                         HomeScreen(
                             onEncryptDecrypt = { navController.navigate("single") },
-                            onBatch = { navController.navigate("batch") },
-                            onAbout = {}
+                            onBatch = { navController.navigate("batch") }
                         )
                     }
 

android/app/src/main/kotlin/com/neuronencrypt/app/ui/BatchScreen.kt

@@ -17,6 +17,7 @@ import androidx.compose.foundation.text.KeyboardOptions
 import androidx.compose.material.icons.Icons
 import androidx.compose.material.icons.filled.*
 import androidx.compose.material3.*
+import androidx.compose.material3.TabRowDefaults.tabIndicatorOffset
 import androidx.compose.runtime.*
 import androidx.compose.ui.Alignment
 import androidx.compose.ui.Modifier

android/app/src/main/kotlin/com/neuronencrypt/app/ui/SingleFileScreen.kt

@@ -17,6 +17,7 @@ import androidx.compose.foundation.verticalScroll
 import androidx.compose.material.icons.Icons
 import androidx.compose.material.icons.filled.*
 import androidx.compose.material3.*
+import androidx.compose.material3.TabRowDefaults.tabIndicatorOffset
 import androidx.compose.runtime.*
 import androidx.compose.ui.Alignment
 import androidx.compose.ui.Modifier

android/gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,7 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
+networkTimeout=10000
+validateDistributionUrl=true
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists