Add files via upload

[bylickilabs]

No description provided.

[Copilot]

Pull Request Overview

This PR introduces the TitanCrypt Engine, a secure archive encryption system that packages directory structures into encrypted container files using AES-256-GCM and PBKDF2-SHA512.

Key Changes:

• Adds cryptographic primitives for key derivation and AES-GCM encryption/decryption
• Implements container format with header parsing and encrypted payload management
• Provides file system utilities to collect and package files into encrypted archives

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
crypto.py	Implements cryptographic operations including PBKDF2 key derivation and AES-GCM encryption/decryption
fsutil.py	Provides utilities to recursively collect file entries with metadata
engine.py	Core engine handling container creation, encryption, decryption, verification, and password changes
init.py	Exports public API functions and exception classes

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The default_backend() parameter is deprecated in cryptography >= 3.0 and no longer required. Remove this parameter as the backend is automatically selected.

[Copilot]

Path traversal vulnerability: rel_path from the manifest is used directly without validation. A malicious container could include paths like '../../../etc/passwd' to write files outside the intended output directory. Use Path.resolve() and verify the resolved path starts with out_root.resolve() to prevent directory traversal attacks.

Suggested change

	target_path = out_root / rel_path
	target_path = (out_root / rel_path).resolve()
	out_root_resolved = out_root.resolve()
	if not str(target_path).startswith(str(out_root_resolved) + str(out_root_resolved.anchor)):
	# Fallback: if out_root_resolved does not end with a separator, add one
	if not str(target_path).startswith(str(out_root_resolved) + "/") and not str(target_path).startswith(str(out_root_resolved) + "\\"):
	raise ValueError(f"Path traversal detected: {rel_path}")

[Copilot]

Missing validation for required manifest fields. If 'path', 'offset', or 'length' keys are missing from an entry, this will raise a KeyError. Consider using .get() with validation or wrap in a try-except block with a meaningful InvalidContainerError.

Suggested change

	for entry in manifest.get("entries", []):
	for entry in manifest.get("entries", []):
	for key in ("path", "offset", "length"):
	if key not in entry:
	raise InvalidContainerError(f"Manifest entry missing required key: '{key}' in entry: {entry}")

[Copilot]

Files are written without permission checks or sanitization. Consider setting appropriate file permissions (e.g., 0o600 for sensitive data) using os.chmod() after writing to prevent unauthorized access.