claim-check/CHANGELOG.md

Changelog

0.1.0 - 2026-09-28

First public release under MIT.

• checkClaims() and formatClaims() check advertised cryptographic claims against the keys, ciphers and transport settings described.
• end-to-end-encrypted and zero-knowledge fail when a key is held by the server, an operator or a third party, whatever the cipher strength.
• encrypted-at-rest, encrypted-in-transit, passwords-hashed and forward-secrecy are each checked against the element that would enforce them.
• Broken primitives (MD5, SHA-1, DES, 3DES, RC4, ECB) are reported even when nothing was claimed about them.
• A claim with nothing describing it is reported as not assessed, never as a pass.