**What Changed:**

- **Removed:** All libsodium dependencies and PAKE-based authentication
- **Replaced With:** ECDH + DTLS + SAS triple-layer security system
- **Impact:** Eliminates complex PAKE implementation in favor of standardized protocols

**Security Benefits:**
-  **Simplified Architecture** - Reduced attack surface
-  **Standards Compliance** - RFC-compliant protocols
-  **Better Maintenance** - Native Web Crypto API usage
-  **Enhanced Security** - Triple-layer defense system

**New Features:**
- **Elliptic Curve Diffie-Hellman** using P-384 (secp384r1)
- **Cryptographically secure** key pair generation
- **Perfect Forward Secrecy** with session-specific keys
- **MITM resistance** requiring knowledge of both private keys
This commit is contained in:
lockbitchat
2025-09-04 17:25:01 -04:00
parent 0d029f5d39
commit e2316f6557
11 changed files with 1269 additions and 300 deletions

10
sw.js
View File

@@ -1,9 +1,9 @@
// SecureBit.chat Service Worker
// Enhanced Security Edition v4.01.442
// Enhanced Security Edition v4.02.985 - ECDH + DTLS + SAS
const CACHE_NAME = 'securebit-v4.0.3';
const STATIC_CACHE = 'securebit-static-v4.0.3';
const DYNAMIC_CACHE = 'securebit-dynamic-v4.0.3';
const CACHE_NAME = 'securebit-v4.02.985';
const STATIC_CACHE = 'securebit-static-v4.02.985';
const DYNAMIC_CACHE = 'securebit-dynamic-v4.02.985';
// Files to cache for offline functionality (excluding external CDNs that may have CORS issues)
const STATIC_ASSETS = [
@@ -370,4 +370,4 @@ self.addEventListener('unhandledrejection', (event) => {
console.error('❌ Service Worker unhandled rejection:', event.reason);
});
console.log('🔧 SecureBit.chat Service Worker loaded - Enhanced Security Edition v4.01.442');
console.log('🔧 SecureBit.chat Service Worker loaded - Enhanced Security Edition v4.02.985 - ECDH + DTLS + SAS');