Andy DixonandClaude
91d49aeecf
- absorb uses the PAX-corrected entry size (large Go/bsdtar archives were stored truncated) and refuses GNU sparse entries - the agent reads the key from fd 0 straight into locked memory, and never unlinks a live agent's socket - the key file PEM parser is a port of Go's pem.Decode - the STREAM writer fails permanently after a write error; plaintext is cleared on reader error paths; AEAD, HMAC and hash states are zeroized - add/migrate refuse paths inside the vault; publish reports filesystems without an atomic no-replace primitive clearly and treats a leftover temporary name as a warning; Windows rejects NTFS-special names - the leak test runs in its own process Co-Authored-By: Claude <noreply@anthropic.com>
47 lines
1.7 KiB
TOML
47 lines
1.7 KiB
TOML
[package]
|
|
name = "vault"
|
|
version = "0.6.0"
|
|
edition = "2024"
|
|
rust-version = "1.99"
|
|
license = "GPL-3.0-or-later"
|
|
description = "Post-quantum encrypted file vault with a decoy passphrase"
|
|
homepage = "https://dixon.cx/vault"
|
|
repository = "https://github.com/andydixon/vault"
|
|
publish = false
|
|
|
|
[dependencies]
|
|
argon2 = { version = "0.6", default-features = false, features = ["alloc", "zeroize"] }
|
|
chacha20poly1305 = { version = "0.11", default-features = false, features = ["alloc", "zeroize"] }
|
|
hkdf = "0.13"
|
|
hmac = { version = "0.13", features = ["zeroize"] }
|
|
sha2 = { version = "0.11", default-features = false, features = ["zeroize"] }
|
|
sha3 = { version = "0.11", default-features = false, features = ["zeroize"] }
|
|
ml-kem = { version = "0.3.2", features = ["zeroize", "hazmat"] }
|
|
zeroize = { version = "1.9", features = ["derive", "serde"] }
|
|
getrandom = "0.4"
|
|
base64 = "0.23"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
jiff = "0.2"
|
|
tar = { version = "0.4.46", default-features = false }
|
|
flate2 = { version = "1.1", default-features = false, features = ["rust_backend"] }
|
|
ureq = { version = "3.4", default-features = false, features = ["rustls", "platform-verifier", "gzip"] }
|
|
|
|
[dev-dependencies]
|
|
aes = "0.9"
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
rustix = { version = "1.1.5", features = ["fs", "process", "mm", "termios", "event", "net", "stdio", "param"] }
|
|
|
|
[target.'cfg(windows)'.dependencies]
|
|
windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_Storage_FileSystem", "Win32_System_Console", "Win32_System_IO", "Win32_System_Memory", "Win32_Security"] }
|
|
|
|
[profile.release]
|
|
codegen-units = 1
|
|
lto = true
|
|
strip = true
|
|
|
|
[[bench]]
|
|
name = "micro"
|
|
harness = false
|