Initial vault: single-binary post-quantum file vault

Strip Fury back to its vault functionality in one `vault` command:
genkey, init, add (file or directory, optional folder inside the vault),
list, get, mv and rm.

The hybrid FrodoKEM-640 + ML-KEM-768 encryption core is kept under
internal/pqcrypt. Signing, policies, profiles, backups, SSH remotes,
FIDO2, agents, provenance and compression are removed.
This commit is contained in:
Andy Dixon
2026-09-26 14:05:10 +01:00
commit d95f2d04a4
26 changed files with 5689 additions and 0 deletions
+13
View File
@@ -0,0 +1,13 @@
module github.com/andydixon/vault
// Go 1.26.6 or newer is a security requirement inherited from the crypto
// library: the standard-library fixes it relies on exist only from that
// release.
go 1.26.6
require (
github.com/cloudflare/circl v1.6.4
golang.org/x/crypto v0.53.0
golang.org/x/sys v0.46.0
golang.org/x/term v0.44.0
)