From 7b609fffddf3ae138cdf301c97bad805fc508616 Mon Sep 17 00:00:00 2001 From: Yuval Adam <_@yuv.al> Date: Thu, 26 Feb 2026 09:13:23 +0100 Subject: Add key hierarchy analysis, update all docs with WASM/auth/native messaging findings New document: - key-hierarchy.md: Full key derivation model, MUK lifecycle, SRP auth, biometric unlock, Duo MFA, dSecret bypass, delegated sessions, password timebox mechanism, crypto algorithm inventory Major updates: - architecture.md: Expanded WASM section with confirmed 80+ rA.* methods, clarified WASM is portability layer not security boundary - trust-boundaries.md: Corrected Zone A (keys in JS heap not just WASM), Zone D (confirmed native messaging protocol with biometry messages), Zone F (WASM is NOT a privilege boundary), detailed sensitive data table with confirmed storage locations, new Critical attack surface category - message-catalog.md: Added native messaging protocol (biometry save/unlock/ remove, availability check), desktop connection messages, server notification events - TODO.md: Marked completed items, added key material exposure assessment section, authentication & session security section --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index 8ad8c35..d45428d 100644 --- a/README.md +++ b/README.md @@ -6,8 +6,9 @@ Static analysis of the 1Password browser extension for Firefox (`1pass-xpi`), ve | File | Description | |------|-------------| -| [architecture.md](architecture.md) | Runtime topology, boot pipeline, permission model, WASM modules | -| [message-catalog.md](message-catalog.md) | Complete message handler map extracted from source | +| [architecture.md](architecture.md) | Runtime topology, boot pipeline, permission model, WASM core interface | +| [key-hierarchy.md](key-hierarchy.md) | Key derivation, MUK lifecycle, auth flows, biometry, Duo MFA, crypto algorithms | +| [message-catalog.md](message-catalog.md) | Complete message handler map extracted from source, including native messaging protocol | | [webauthn-analysis.md](webauthn-analysis.md) | WebAuthn monkey-patching, page-world IPC protocol, attack surface | | [trust-boundaries.md](trust-boundaries.md) | Trust zones, dataflow, sensitive data classes, attack surfaces | | [telemetry.md](telemetry.md) | Snowplow analytics, Sentry error reporting, DNS privacy proxy | -- cgit v1.3.1