vault

Files

T

Andy DixonandClaude 91d49aeecf Fix review findings: PAX sizes, agent stdin, PEM parity, sticky writer

- absorb uses the PAX-corrected entry size (large Go/bsdtar archives were
  stored truncated) and refuses GNU sparse entries
- the agent reads the key from fd 0 straight into locked memory, and never
  unlinks a live agent's socket
- the key file PEM parser is a port of Go's pem.Decode
- the STREAM writer fails permanently after a write error; plaintext is
  cleared on reader error paths; AEAD, HMAC and hash states are zeroized
- add/migrate refuse paths inside the vault; publish reports filesystems
  without an atomic no-replace primitive clearly and treats a leftover
  temporary name as a warning; Windows rejects NTFS-special names
- the leak test runs in its own process

Co-Authored-By: Claude <noreply@anthropic.com>

2026-10-08 12:23:27 +01:00

frodo.rs

Rust crypto core: FrodoKEM port, hybrid suite, Fury, STREAM, key files

2026-10-08 10:12:53 +01:00

fury.rs

Store, validated types, bounded pipeline, no-clobber extraction

2026-10-08 10:21:44 +01:00

header.rs

Rust crypto core: FrodoKEM port, hybrid suite, Fury, STREAM, key files

2026-10-08 10:12:53 +01:00

kem.rs

Rust crypto core: FrodoKEM port, hybrid suite, Fury, STREAM, key files