diff options
| author | Yuval Adam <_@yuv.al> | 2026-02-26 09:13:23 +0100 |
|---|---|---|
| committer | Yuval Adam <_@yuv.al> | 2026-02-26 09:13:23 +0100 |
| commit | 7b609fffddf3ae138cdf301c97bad805fc508616 (patch) | |
| tree | e952de5263e507e52b74db48cac8ac93f36fa8be /README.md | |
| parent | 54adf11e1c8905c97512fcf29d8b3d75aa9eb0cb (diff) | |
New document:
- key-hierarchy.md: Full key derivation model, MUK lifecycle, SRP auth,
biometric unlock, Duo MFA, dSecret bypass, delegated sessions, password
timebox mechanism, crypto algorithm inventory
Major updates:
- architecture.md: Expanded WASM section with confirmed 80+ rA.* methods,
clarified WASM is portability layer not security boundary
- trust-boundaries.md: Corrected Zone A (keys in JS heap not just WASM),
Zone D (confirmed native messaging protocol with biometry messages),
Zone F (WASM is NOT a privilege boundary), detailed sensitive data table
with confirmed storage locations, new Critical attack surface category
- message-catalog.md: Added native messaging protocol (biometry save/unlock/
remove, availability check), desktop connection messages, server notification
events
- TODO.md: Marked completed items, added key material exposure assessment
section, authentication & session security section
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -6,8 +6,9 @@ Static analysis of the 1Password browser extension for Firefox (`1pass-xpi`), ve | File | Description | |------|-------------| -| [architecture.md](architecture.md) | Runtime topology, boot pipeline, permission model, WASM modules | -| [message-catalog.md](message-catalog.md) | Complete message handler map extracted from source | +| [architecture.md](architecture.md) | Runtime topology, boot pipeline, permission model, WASM core interface | +| [key-hierarchy.md](key-hierarchy.md) | Key derivation, MUK lifecycle, auth flows, biometry, Duo MFA, crypto algorithms | +| [message-catalog.md](message-catalog.md) | Complete message handler map extracted from source, including native messaging protocol | | [webauthn-analysis.md](webauthn-analysis.md) | WebAuthn monkey-patching, page-world IPC protocol, attack surface | | [trust-boundaries.md](trust-boundaries.md) | Trust zones, dataflow, sensitive data classes, attack surfaces | | [telemetry.md](telemetry.md) | Snowplow analytics, Sentry error reporting, DNS privacy proxy | |