adlee-was-taken 2ea7658036 feat(core): length-prefixed Argon2 input + NFC + Zeroize (audit H1, H2) ...

derive_master_key now:
- length-prefixes passphrase and image_secret to eliminate concatenation
  ambiguity (H1)
- normalizes passphrase to UTF-8 NFC before hashing
- returns Zeroizing<[u8; 32]> so the master key is wiped on drop (H2)
- wraps the intermediate password buffer in Zeroizing for the same reason

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-19 09:57:58 -04:00

..

src

feat(core): length-prefixed Argon2 input + NFC + Zeroize (audit H1, H2)

2026-04-19 09:57:58 -04:00

Cargo.toml

feat(core): length-prefixed Argon2 input + NFC + Zeroize (audit H1, H2)

2026-04-19 09:57:58 -04:00