Expand description
Cryptographic functions for account system
Pinned Account Argon2id key derivation. Authenticated bundle wrapping lives in the credential module; no separate per-key storage format is retained.
Constants§
- KEY_
LENGTH - Derived key length for AES-256 (32 bytes)
- NONCE_
LENGTH - Nonce length for AES-GCM (12 bytes standard)
- SALT_
LENGTH - Salt string length for Argon2 (base64 encoded, 22 chars)
Functions§
- derive_
encryption_ key - Derive an encryption key from a password and salt using Argon2id
- generate_
salt - Generate a random salt string for Argon2id key derivation.