From 40e561f4448333d19bca70201e718a4df04b4f36 Mon Sep 17 00:00:00 2001 From: torlando-tech Date: Tue, 5 May 2026 01:16:54 -0400 Subject: [PATCH] Repoint microReticulum submodule at torlando-tech/pyxis-fixes-on-0.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Was: attermann/microReticulum @ tag 0.3.0 (vanilla) Now: torlando-tech/microReticulum @ pyxis-fixes-on-0.3.0 @ 97e72a3 = vanilla 0.3.0 + 3 focused upstream-PR-ready commits The branch carries our spec-conformance fixes that vanilla upstream 0.3.0 is missing: bb177e4 Fix PKCS7 padding to be spec-conformant (RFC 5652 §6.3) 918f743 Fix HMAC convenience digest() helper hashing the message twice 97e72a3 Apply RFC 7748 §5 scalar clamping in X25519PrivateKey constructor Each is one self-contained commit with a unit test that catches the bug — designed so they can be cherry-picked or PR'd to attermann upstream individually after we've finished e2e testing pyxis on top. The conformance bridge baseline against vanilla 0.3.0 was 50/85; expectation post-this-pin is to recover to 52/85 (the X25519 clamping unblocks both x25519_generate and identity_from_private_key). --- .gitmodules | 12 ++++++++---- deps/microReticulum | 2 +- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/.gitmodules b/.gitmodules index f17e6665..03953259 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,6 +1,10 @@ [submodule "deps/microReticulum"] path = deps/microReticulum - url = https://github.com/attermann/microReticulum.git - # Pinned at the 0.3.0 release tag so the build is reproducible. Bump - # the pin deliberately when we want a newer microReticulum (and re-run - # the conformance suite to catch any drift). + url = https://github.com/torlando-tech/microReticulum.git + branch = pyxis-fixes-on-0.3.0 + # torlando-tech/microReticulum's pyxis-fixes-on-0.3.0 = upstream + # attermann/microReticulum @ 0.3.0 + a small focused commit series of + # interop fixes (PKCS7 spec-correct padding, HMAC double-update, + # X25519 RFC 7748 scalar clamping). Each commit is upstream-PR-ready; + # the branch will roll forward as new fixes are surfaced and fold + # back into upstream once the PRs land. diff --git a/deps/microReticulum b/deps/microReticulum index f8d91d12..97e72a3f 160000 --- a/deps/microReticulum +++ b/deps/microReticulum @@ -1 +1 @@ -Subproject commit f8d91d1211d1d3f629a1d20391cf57ac0d1847c8 +Subproject commit 97e72a3f43e7e70d7235a14082fd693f1a9342e0