exlim/cyberchef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,491 Commits 13 Branches 505 Tags
Commit Graph

4491 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
J8k3
514c97c5b2 fix(payment): align AES calls with upstream v11 operation signatures 
The v11 sync changed the AESEncrypt/AESDecrypt operation argument
layouts (purely additive):
  - AESDecrypt inserted 'ivLength' at args[2] and appended 'ivFromInput'
    at args[8].
  - AESEncrypt appended 'Include IV in output' at args[6].

PaymentDataCipher still passed the old positional layout, so AESDecrypt
read args[7].string off undefined, erroring the 4 Payment Decrypt/
Re-Encrypt tests. Realign both call sites; pass ivFromInput/includeIV
'Off' to preserve the prior behaviour (IV supplied explicitly, never
sliced from or prepended to the data).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-15 08:30:39 -04:00
J8k3
1045fcc3c5 ci(sync): auto-resolve recurring upstream conflicts, fix workflow restore 
The weekly upstream sync hard-failed whenever upstream touched files the
fork diverges on (README branding) or removed a now-generated file
(tests/operations/index.mjs). It also had a latent bug: the workflow
restore ran 'git checkout HEAD -- .github/workflows/' *after* the merge
had already auto-committed, so HEAD was the merge commit and the restore
was a no-op.

- Merge with --no-commit so HEAD stays the pre-merge fork commit, making
  the workflow restore actually keep the fork's workflows.
- Auto-resolve the two recurring conflicts: keep the fork's README, and
  honour upstream deletions of generated/gitignored files.
- Fail loudly (and abort the merge) on any other, unexpected conflict
  instead of pushing a half-resolved tree.
- Exit cleanly when already up to date.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-15 08:21:03 -04:00
J8k3
6e85321409 Merge upstream/master (v11.1.0) into master 
Resolved conflicts from the weekly sync that had been failing since
2026-06-08:

- README.md: kept fork branding (cyberchef.jacobmarks.com) and the
  [p01]-[p25] payment-recipe links, while adopting upstream's updated
  [10] recipe and new [13] entry (rewritten to the fork domain) so the
  newly-merged body references resolve.
- tests/operations/index.mjs: accepted upstream's deletion. It is now
  auto-generated by generateOpsIndex.mjs during 'grunt configTests'
  (and gitignored), so the fork's custom-operation tests are still
  discovered from tests/operations/tests/.
- .github/workflows/: restored to the fork's versions, matching the
  sync_upstream.yml behaviour (preserves build-and-deploy + sync).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-15 08:17:10 -04:00
Kendall Goto
7a28e0534b
Fix: Reverse highlights unwind incorrectly (#2022) 
Co-authored-by: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
 2026-06-15 10:06:51 +01:00
Shivam Kumar
31808e83d5
Fix Uint8Array concat crash in Parse IPv4 header (#2409) 2026-06-15 09:34:25 +01:00
qais
3f62b14d83
Fix typos and documentation errors (bytes→bits, wrong release link, spelling) (#2404) 
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
 2026-06-15 09:15:40 +01:00
axjp
91178a8e6f
Add integer check for alphabet size (#2458) 
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
 2026-06-15 09:05:24 +01:00
sky
7f0544e1c6
fix: validate hexdump width upper bound (#2514) 2026-06-15 09:02:56 +01:00
GCHQDeveloper581
92ea854ea7
Bump v11.1.0 (#2558) v11.1.0 2026-06-13 09:35:49 +01:00
GCHQDeveloper581
894560f6ce
Security: Add fix, and tests, for Lorem Ipsum DoS issue (#2557) 2026-06-13 08:53:15 +01:00
dependabot[bot]
dbcfb06d3e
chore (deps): bump the patch-updates group with 4 updates (#2552) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-12 12:21:54 +01:00
dependabot[bot]
86d579b1ec
chore (deps): bump the actions-dependencies group with 2 updates (#2551) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-12 12:14:19 +01:00
dependabot[bot]
d7c7ac4aaf
chore (deps): bump the docker-dependencies group with 2 updates (#2550) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-12 12:01:28 +01:00
dependabot[bot]
78d558c858
chore (deps): bump protobufjs from 8.5.0 to 8.6.2 in the minor-updates group (#2553) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-12 11:46:48 +01:00
GCHQ Developer 85297
9d43334429
Security Policy Update (#2547) 2026-06-11 11:36:01 +01:00
GCHQDeveloper581
4bd609a5ee
Fix spurious error messages generated during webpack build (#2545) 2026-06-10 12:52:59 +01:00
dependabot[bot]
f30668aeff
chore (deps): bump shell-quote from 1.8.3 to 1.8.4 (#2543) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-10 11:41:49 +01:00
Fufu
0c0f330ae2
Implementing ROR13 feature (#2539) 2026-06-10 11:21:29 +01:00
J8k3
65fc9618b6 docs(agents): clarify lint runs locally on W: share, not Docker 2026-06-09 23:16:36 -04:00
J L
5105aad91d
New operation improvements (#1431) 
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
 2026-06-09 09:36:07 +01:00
GCHQDeveloper581
61deeb8165
Npm and yarn/major version updates (#2527) 
Updated versions:
* cspell 10.0.1
* grunt-eslint 26.0.0
* grunt-webpack 8.0.0
* bignumber.js 11.1.2
* cbor 10.0.12
* diff 9.0.0
* protobufjs 8.5.0
* tesseract.js 7.0.0
* ua-parser-js 2.0.10
 2026-06-08 14:21:26 +01:00
andreas
d735496641
Update README to reflect AES Decrypt changes (#2502) 2026-06-05 20:19:24 +01:00
Harel Katz
c929819189
feat: add Escape Smart Characters operation (#2391) 2026-06-05 13:44:20 +01:00
andreas
da202d54f1
feat: Get AES IV from input (QoL) (#2471) 2026-06-05 11:23:38 +01:00
Syed Ishmum Ahnaf
20b46bf1a0
fix: validate text encoding options (#2497) 2026-06-05 10:47:48 +01:00
dependabot[bot]
3034d63f90
chore (deps): bump the minor-updates group with 5 updates (#2500) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (removed jq-web update, and added it to dependabot.yml block list)
 2026-06-05 10:26:43 +01:00
dependabot[bot]
8a5c60ac74
chore (deps): bump the patch-updates group with 2 updates (#2499) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 09:47:23 +01:00
dependabot[bot]
5318bab19f
chore (deps): bump nginxinc/nginx-unprivileged from df0e9ed to 0a1e718 in the docker-dependencies group (#2498) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 09:40:18 +01:00
A Normal Ladd
72ca1aeec7
Add remove ANSI escape codes operation (#2143) 
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (additional test case)
 2026-06-03 10:57:13 +01:00
GCHQ Developer 85297
89b5c7dee3
Fix option ingredients being overwriten (#2341) 2026-06-02 20:35:21 +01:00
github-actions[bot]
8dd1f09d49 Merge remote-tracking branch 'upstream/master' 2026-06-01 11:05:46 +00:00
dependabot[bot]
53d6f0c746
chore (deps): bump qs and express (#2478) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-30 12:44:28 +01:00
dependabot[bot]
a50e868cb9
chore (deps): bump tmp from 0.2.5 to 0.2.7 (#2479) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-30 12:38:34 +01:00
dependabot[bot]
bdcd5fa8b1
chore (deps): bump the patch-updates group across 1 directory with 6 updates (#2463) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-29 11:31:26 +01:00
dependabot[bot]
bf2e12d141
chore (deps): bump the docker-dependencies group across 1 directory with 2 updates (#2468) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-29 11:05:45 +01:00
dependabot[bot]
61c00ae6da
chore (deps): bump terser from 5.46.2 to 5.48.0 (#2385) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-28 16:02:34 +01:00
GCHQDeveloper581
5383da81f8
Make dependabot quieter (#2467) 
* group remaining update categories
* add cooldowns
 2026-05-28 14:51:05 +01:00
Blank0120
6b780bc507
update sitemap (#2443) 2026-05-28 12:59:33 +01:00
GCHQDeveloper581
98bb5f117d
Bump webpack-dev-server to 5.2.4 (#2417) 2026-05-28 09:38:25 +01:00
GCHQDeveloper581
772f7866bf
Fix pgp tests (#2461) 
Co-authored-by: C85297 <95289555+C85297@users.noreply.github.com> (fix for #2267)
 2026-05-28 09:17:43 +01:00
dependabot[bot]
b47c1c0547
chore (deps): bump the patch-updates group across 1 directory with 4 updates (#2438) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-27 16:33:27 +01:00
dependabot[bot]
3da6a51ef7
chore (deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#2439) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-27 16:24:07 +01:00
dependabot[bot]
ea29704a73
chore (deps): bump docker/login-action from 4.1.0 to 4.2.0 (#2441) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-27 16:20:47 +01:00
dependabot[bot]
4de8d338aa
chore (deps): bump docker/metadata-action from 6.0.0 to 6.1.0 (#2442) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-27 16:09:51 +01:00
github-actions[bot]
7830bac871 Merge remote-tracking branch 'upstream/master' 2026-05-25 09:45:00 +00:00
J8k3
db1e72d05c docs: standardize Session Start and Commit Scope in AGENTS.md 
Align wording with the shared standard used across all four repos in
this project family. No behavioral change — same rules, consistent text.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 14:07:46 -04:00
J8k3
16a893e70a test(payment): add 5 golden-value tests for AES ECB, AES CTR, DUKPT TDES CBC 
Covers the remaining untested cipher profiles in PaymentEncryptData /
PaymentDecryptData. Values are pinned from a clean run against the forge
upstream library, catching regressions in mode selection, IV wiring,
and padding behaviour without re-deriving cryptographic outputs.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 14:05:23 -04:00
J8k3
60a89aa64f test(payment): add 7 new test cases covering json output shape and TDES cipher profiles 
JSON output shape (covering recent ksn/bdk additions):
  - DUKPT Derive AES Key: IK JSON output includes ksn, iki, counter
  - DUKPT Derive TDES Key: IPEK JSON output includes ksn and bdk

Payment cipher coverage (previously only AES CBC was tested):
  - Payment Encrypt/Decrypt Data: TDES ECB (APC cross-validated block 1)
  - Payment Encrypt/Decrypt Data: TDES CBC (derived from passing re-encrypt chain)
  - Payment Encrypt Data: DUKPT TDES ECB Data variant (ANSI X9.24-1; APC variant
    mismatch documented in test comment and PAYMENT_RECIPES.md)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 13:03:31 -04:00
J8k3
4ce7860a19 fix(dukpt): add KSN/BDK to JSON output for AES and TDES DUKPT derive operations 
AES DUKPT IK JSON was missing ksn, iki, counter; working key was missing ksn.
TDES DUKPT IPEK and session key JSON were missing ksn and bdk.
Both now mirror the full derivation context, making json=true self-contained for debugging and cross-validation.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 10:52:43 -04:00
Blank0120
6a3a370bb1
update bson (#2425) 
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (update of dependabot excluded packages)
 2026-05-23 12:42:40 +01:00