Crypta v2

Cryptad v2 release notes

Cryptad v2 focuses on safer content handling, a smoother first-run experience, and a more reliable launcher and core updater. It also removes the legacy plugin runtime and changes the encrypted AEAD stream format used by some persistent data.

What's new

• Harden the built-in web UI and content filters for HTML, CSS, redirects, and common media paths including JPEG, GIF, FLAC, Vorbis, Theora, MP3, and M3U handling.
• Rework first-time setup and startup flow so the wizard redirects cleanly, password changes behave correctly during setup, and first-run startup logs are less noisy.
• Improve connectivity feedback with better public IP detection, clearer port-forward alerts, fixed darknet handshake regressions, and cleaner diagnostics reporting.
• Make bookmarks and localization behavior more reliable across restarts.

Upgrade and compatibility

• Breaking change: remove the legacy in-process plugin runtime. Older plugins, plugin web UIs, and plugin automation paths no longer run in Cryptad v2.
• Breaking change: switch AEAD streams to AES-GCM. Older OCB-encrypted persistent request data and plugin store files are not migrated automatically, so some queued or in-progress work from older versions may not resume after upgrade.
• Recommended: back up your Cryptad data directory before upgrading from v1.

Launcher and installers

• Improve macOS packaging and relocation handling so moving the app bundle is less likely to break metadata or code signing.
• Fix launcher theme detection and live theme updates across Flatpak/XDG portals, GNOME, KDE, macOS, and Windows.
• Keep launcher window sizing consistent and improve packaged Windows launcher troubleshooting output.

Core updater

• Make package-based core updates more reliable by preserving custom update channels and revocation settings, remembering the last known-good fetched edition per channel, and resetting stale state when channels change.
• Stop background auto-downloads for invalid or older build numbers and fix updater status deadlock paths.
• Remove the remaining legacy jar update-over-mandatory code paths. Package-based core updates remain the supported release path.

Stability and security

• Fix persistent storage edge cases including Windows file moves, restored random-access-file cleanup, no-close checksum handling, and resume or cancel paths for persisted requests.
• Reduce upload and insert stalls, and remove an internal command API deadlock that could block request handling.
• Expand automated tests and static-analysis coverage across the release, which caught and fixed a large number of correctness issues before tagging.

SHA256 Checksums

deedb84031984b5ff78b717c32d93c838e8f8c29a286940e1b679d78d7db32b6  ./CryptaInstaller-v2-amd64.exe
1ed03fd9733109466d33b7436bc9df255f875fead7e748dc37cf99d851ba92bb  ./CryptaInstaller-v2-arm64.exe
b66866cbcd27ca82e1889c92120d163adeb921003d8b482da6c81085c1124d85  ./cryptad-v2-amd64.deb
56ca1cd8b2c238b4fea9bf3824f6ffd2b3c6dbc526aa9af55bdc832c35bb93ae  ./cryptad-v2-amd64.flatpak
18cb7e89682f799c70615b855298fb8b0ad7e14b0a46fc59ddb20601733ab6f7  ./cryptad-v2-amd64.rpm
a9775abb53aa70644ea17359b7946a065e0d5e797177b2525d4bb1a5b35d7038  ./cryptad-v2-amd64.snap
9a8bed384d580230b492fff41f4f87055dfbbc84981e89f4853e193cef977087  ./cryptad-v2-arm64.deb
0d93e4be38185971e8c5b028174d144afa01da63eaa937ff0289d4c51cc477a3  ./cryptad-v2-arm64.dmg
54b13217b700a22591e5cba135a595ef3d00952797b39448d946631b38e4d6d8  ./cryptad-v2-arm64.flatpak
1ceca567cb0adf94769790ec31c02dd791cdfe09a2c029a7ed6a5998191e4d4d  ./cryptad-v2-arm64.rpm
f6c40bb66b9132b4f34b9ae05dce40e42aa69ef4569a32dfcbe5ee7fd413a6e2  ./cryptad-v2-arm64.snap
08f6129e2cb0c56e584679209373d76c792ff7a8abcf05d48b1b0c6909d83ac5  ./cryptad.jar

Crypta v1

What’s New

• Desktop‑friendly installers and images:
  • Linux: native DEB/RPM packages under /opt/cryptad/Crypta with icons and menu entry.
  • macOS: DMG app image; drag‑and‑drop install.
  • Windows: per‑architecture app image with native wrapper binaries and launchers.
• Crypta Launcher (GUI): one‑click Start/Stop, live logs, and an “Open in Browser” button that appears when the node’s web UI is ready.
• Package‑based Core Updater: downloads an OS/CPU‑specific installer, shows progress and clear results, and guides you to complete the update.
• Smoother first‑time setup: follows your OS light/dark theme; higher default bandwidth; smarter datastore size suggestions based on free disk space.
• Many reliability, performance, and security improvements, including upstream fixes from Hyphanet.

Installers & Distribution

• Linux
  • Installs a desktop entry and icon on desktop systems.
  • On servers, installs a cryptad systemd service but does not auto‑start; enable/start it when you are ready.
  • Paths and menus are normalized so GNOME/KDE show the correct name and icon.
• macOS
  • DMG app image included. Unsigned builds include Gatekeeper guidance if needed.
• Windows
  • Includes native wrapper executables for x86‑64 and ARM64; the launcher chooses the right one.
• Portable archives (zip/tar.gz) remain available for manual setups.

Core Updater (New)

• Replaces self‑updating the main JAR with a package‑based flow.
• Picks the right installer for your OS/arch, downloads it to the node’s update folder, and shows clear progress in the browser UI.
• After a successful download:
  • Desktop: open the installer directly from the UI.
  • Server/headless: follow the short command shown to install with admin privileges.
• Plugin updates are unchanged and continue to work in‑app.

Crypta Launcher (New GUI)

• Start/Stop the node and stream combined stdout+stderr.
• Auto‑detects the node’s web UI (FProxy) port from logs and enables “Open in Browser”.
• Keyboard shortcuts: s start/stop, q quit; arrows/PageUp/PageDown navigate; Enter/Space activate.
• Robust process handling and log tailing; works across Linux, macOS, and Windows.

First‑Time Setup & Everyday UX

• Theme follows your OS preference (light/dark). On Linux and Flatpak, changes are detected through the desktop portal for accuracy.
• Bandwidth defaults in the First‑Time Wizard:
  • Download = 10 MiB/s; Upload = 1 MiB/s (you can change these anytime).
  • The “detected bandwidth” row is hidden until a reliable detector is available.
• Datastore sizing suggestions are smarter and safer:
  • If free space > 50 GiB: suggests 20% (minimum 10 GiB), capped at 256 GiB.
  • If free space > 5 GiB: suggests 20% (minimum 2 GiB).
• Quality‑of‑life tweaks: bookmarks open in a new tab; sharper SVG favicon (ICO fallback).

Platform‑Specific Notes

• Windows
  • Native wrapper support, graceful shutdown via an “anchor” file (with automatic fallback), and better icon/theme integration.
  • The launcher can find a bundled Java runtime inside app images.
• Linux
  • Desktop entries and icons are registered correctly; GNOME Dock shows the right app identity.
  • Server/Desktop detection avoids misclassifying headless servers. Installer creates a cryptad system user/group.
• macOS
  • DMG builds included; improved Launcher behavior for Dock and window focus.
• Snap/Flatpak
  • Snap‑aware working directories and XDG paths; Flatpak builds honor desktop‑portal theme settings. GUI hand‑offs behave correctly from sandboxed environments.

Performance, Stability & Security

• Pulls in upstream fixes from Hyphanet (e.g., safer image filtering in the PNG filter, improved hashing utilities, and randomness performance improvements).
• Reduces race conditions in fetchers and improves resource handling and logging.
• Startup hardening: clearer diagnostics, robust wrapper detection, and free‑space checks on the actual data drive.

Remote Debugging (Advanced)

• Set CRYPTAD_REMOTE_DEBUG=1 to enable JDWP on the wrapped JVM. Tunables:
  • CRYPTAD_DEBUG_PORT (default 5005)
  • CRYPTAD_DEBUG_HOST (default 127.0.0.1)
  • CRYPTAD_DEBUG_SUSPEND (y|n, default n)
  • CRYPTAD_DEBUG_TIMEOUT (ms)

Compatibility

• Java 21 is required when running outside the bundled app images.
• On Linux servers, the installer enables but does not auto‑start the systemd service: sudo systemctl start cryptad.
• Network compatibility with Fred‑era peers is preserved where applicable.

Upgrade Guide

• Using the Core Updater (recommended)
  • Open the node’s web UI, go to the update page, download the suggested package, then install it (GUI on desktop; one‑liner on servers).
• Manual download from the release page
  • Linux: sudo dpkg -i Crypta-<version>.deb or sudo rpm -Uvh Crypta-<version>.rpm
  • macOS: open the DMG and drag the app to Applications
  • Windows: use the provided app image; launch via the GUI or bin\cryptad.bat
• Portable archive users
  • Stop the node, replace cryptad.jar (or unpack the new dist), and start via bin/cryptad or the GUI Launcher.

Known Limitations

• Core updates download platform installers; final OS installation still needs your confirmation (or a short admin command on servers).
• The bandwidth “detector” is intentionally disabled in the First‑Time Wizard until it’s reliable.

SHA256 Checksums

acedb89dcac77b1fda346fd61e55fc72777dd5044a5aeacc4720e763f23c4f7d  ./CryptaInstaller-v1-amd64.exe
27ad1bc26b0fcc008288296fb56cec0fef51b6cf18e089c243d8fb83e27a8107  ./CryptaInstaller-v1-arm64.exe
ace7aaae129b1ff1e1d3d5c51cef9874bd5bde1a096655657ed85125d54da164  ./SHA256SUMS.txt
2b29319a55f3b8346b976e37981d827f4fc26af35fdfcf177aec53f75b12224f  ./cryptad-v1-amd64.deb
a6f80a962d676cc78a3e79139d7978ff4a44f2093b411db72ee91311ce84b48b  ./cryptad-v1-amd64.flatpak
c5232d91e6ab8ee1dc60ed18c557c1d0fbe23ed4078cb779303478b8589fbb30  ./cryptad-v1-amd64.rpm
2bcb7142b8a0c409be8e3fd4483d6452658a8d3847e86f741c36cd152aa02e73  ./cryptad-v1-amd64.snap
b462d4e4d597320fefaf9c8e4a73f0da4c4d4b3cb89da8eb6b8387ae24b8cf84  ./cryptad-v1-arm64.deb
8b3e0ef711582b0a8c6b580926c916207dacbc3e77348e08acd92a894485bf2c  ./cryptad-v1-arm64.dmg
eb9a922af35b5d6b9023a339fe0e8e2c2c34afe17d904123015b795e8d1b63b7  ./cryptad-v1-arm64.flatpak
840dd807026860b1fbfd5c4b93be9c3dc34c71481b340201d920e58ae5a16952  ./cryptad-v1-arm64.rpm
8006cf2622cd1e8063a8bdf10af61bf183e877298a6b37a6f568236a95170526  ./cryptad-v1-arm64.snap
55f8344afb1ade0c75488cd1a15f69fc507f6523820b8071d4e6ba3610faac28  ./cryptad.jar