feat(stack-encrypt): encrypt and decrypt owned `Vec<S>` collections as one batch by coderdan · Pull Request #1501 · cipherstash/stack

feat(stack-encrypt): encrypt and decrypt owned Vec<S> collections as one batch

coderdan

committed

6f0b092

test(stack-encrypt): enroll owned collection lifecycle evidence

coderdan

committed

c2d7c7c

fix(stack-encrypt): wipe a column's recovered prefix when an element conversion panics

coderdan

committed

585f6a8

test(stack-encrypt): pin that no vector encrypts into one ciphertext and the decrypt side refuses byte and nullable elements

coderdan

committed

34120f5

test(stack-encrypt): enroll the owned-column drop witnesses, which see a leak the heap observer cannot

coderdan

committed

c762f40

test(stack-encrypt): pin the borrowed element refusal on the trait, not the method

coderdan

committed

4b4a5b4

build(stack-encrypt)!: move to vitaminc 0.9

coderdan

committed

8c4e938

feat(stack-encrypt): byte strings are opaque scalars, through vitaminc's Scalar marker

coderdan

committed

1f81e22

build(stack-encrypt): move the fuzz crates to vitaminc 0.9, and import Controlled where json_index uses it

coderdan

committed

f4e5ba2

Navigation Menu

Repository navigation

feat(stack-encrypt): encrypt and decrypt owned `Vec<S>` collections as one batch - #1501

feat(stack-encrypt): encrypt and decrypt owned `Vec<S>` collections as one batch#1501
coderdan merged 17 commits into
nextfrom
feat/stack-encrypt-owned-collections

Commits on Nov 5, 2026

feat(stack-encrypt): encrypt and decrypt owned Vec<S> collections as one batch

test(stack-encrypt): enroll owned collection lifecycle evidence

fix(stack-encrypt): wipe a column's recovered prefix when an element conversion panics

test(stack-encrypt): pin that no vector encrypts into one ciphertext and the decrypt side refuses byte and nullable elements

test(stack-encrypt): enroll the owned-column drop witnesses, which see a leak the heap observer cannot

test(stack-encrypt): pin the borrowed element refusal on the trait, not the method

build(stack-encrypt)!: move to vitaminc 0.9

feat(stack-encrypt): byte strings are opaque scalars, through vitaminc's Scalar marker

build(stack-encrypt): move the fuzz crates to vitaminc 0.9, and import Controlled where json_index uses it

Commits on Nov 6, 2026

docs(stack-encrypt): plain-language pass over the owned collections docs

docs(stack-encrypt): hide the fake key source in the collections example

docs(stack-encrypt): say collection, not column, and hide the fake key source in the EncryptInto example

feat(stack-encrypt)!: frame readers take a ProtectedRef<[u8]>

fix(golang): the auth guest's tests use vitaminc-protected 0.9.1

docs(stack-encrypt): link the scalar docs to collections, and show nullable values

feat(stack-encrypt): ValueFrame compares in constant time, held in an Equatable

test(stack-encrypt): import AsProtectedRef only where json_index's dynamic tests use it