mirror of
https://github.com/storytold/wordcraft.git
synced 2026-10-29 12:57:09 -06:00
An agile EncryptionInfo without dataIntegrity made decrypt skip the HMAC, so altered ciphertext or an altered StreamSize came back as plaintext. The file no longer decides whether it is authenticated: a package without dataIntegrity is refused. Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>