5 ms·
Per-bucket DEKs with HKDF, hashed policy keys to kill enumeration, HMAC audit chain. This is the kind of boring-correct crypto design I rarely see in Go librari
by emanuele-em 5mo ago
Per-bucket DEKs with HKDF, hashed policy keys to kill enumeration, HMAC audit chain. This is the kind of boring-correct crypto design I rarely see in Go libraries. memguard for the master key is a nice touch too.
- babawere 5mo agoI was thinking its better to be boring-correct :)
- emanuele-em 5mo agoyes I totally agree, my message was a compliment :)