2 posts
OxiArc 0.4.1 is a security-hardening release: ZIP AES/ZipCrypto salts and headers now always come from a real OS CSPRNG (no more silent low-entropy fallback), WinZip-AES is now constant-time, a silently-wrong x86_64 CRC-32 SIMD path is fixed and enabled, and 7z folder coder chains are bounded against decompression-bomb amplification. Plus Zstandard FSE_Compressed_Mode sequence tables and Brotli literal/command/distance block splitting close two long-standing encoder-ratio gaps. 2,658 tests passing, Pure Rust.
OxiArc 0.4.0 rewrites the DEFLATE/zlib decode path for throughput: a two-level Huffman table, a register-resident BitCache, and an output-buffer-as-history design that stops writing every decoded byte twice. New zero-copy inflate_into/zlib_decompress_into APIs, no wire-format change. 2,468 tests passing, Pure Rust.