hugo/IronStorage
1
0
Fork 0
Code Issues 28 Pull Requests Actions Packages Projects Releases Wiki Activity

Implement secure OS-backed secret storage

Browse Source
This commit is contained in:
Hermes Agent
2026-08-10 00:23:40 +00:00
parent 75ce19da00
commit b685a4864c
14 changed files with 1838 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/cryptography.md
View File

@@ -52,6 +52,9 @@ debug representation is redacted and its allocation is zeroed on drop. The
OpenPGP backend's password type also zeroes its owned storage. Plaintext enters
the message encoder through an owning reader instead of being copied into an
ordinary intermediate buffer.
The production provider is the storage-owned native secret store documented in
[`secure-secret-storage.md`](secure-secret-storage.md); protected-key
passphrases are addressed only by their primary fingerprint.
Detached `.gpg-id.sig` files use binary-document signatures with SHA-256 and
issuer fingerprint/key-ID metadata. Verification succeeds only when the valid