derive_master_key now: - length-prefixes passphrase and image_secret to eliminate concatenation ambiguity (H1) - normalizes passphrase to UTF-8 NFC before hashing - returns Zeroizing<[u8; 32]> so the master key is wiped on drop (H2) - wraps the intermediate password buffer in Zeroizing for the same reason Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
24 lines
484 B
TOML
24 lines
484 B
TOML
[package]
|
|
name = "idfoto-cli"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
description = "CLI for idfoto password manager"
|
|
|
|
[[bin]]
|
|
name = "idfoto"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
idfoto-core = { path = "../idfoto-core" }
|
|
clap = { version = "4", features = ["derive"] }
|
|
anyhow = "1"
|
|
rpassword = "5"
|
|
arboard = "3"
|
|
dirs = "5"
|
|
hex = "0.4"
|
|
ed25519-dalek = { version = "2", features = ["rand_core"] }
|
|
rand = "0.8"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
zeroize = "1"
|