- EncryptionKey: remove Clone (move-only per spec), add custom redacting Debug impl, make new() private (cfg(test)), add pub(crate) key_bytes() accessor, make encrypt/decrypt pub(crate) module-internal helpers - CachedKey: refactor to wrap DerivedKey (per service.md) with cached_at and last_accessed fields; add key_type()/private_key()/public_key() accessors - Mnemonic: store validated Bip39Mnemonic to eliminate unwrap() in to_seed(); enable bip39 zeroize feature so inner is zeroized on drop - Fix clippy: remove unused import in drop_tracker tests, use struct init syntax instead of field reassignment with Default - Move low-level EncryptionKey round-trip/wrong-key tests from integration tests to unit tests (encrypt/decrypt now pub(crate))
31 lines
786 B
TOML
31 lines
786 B
TOML
[package]
|
|
name = "alknet-vault"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
description = "Local key vault: BIP39 mnemonic generation, SLIP-0010 Ed25519 HD key derivation, AES-256-GCM encryption for securing provider keys, credentials, and identity material"
|
|
repository.workspace = true
|
|
|
|
[lib]
|
|
name = "alknet_vault"
|
|
|
|
[features]
|
|
default = []
|
|
secp256k1 = ["dep:secp256k1"]
|
|
|
|
[dependencies]
|
|
bip39 = { version = "2", features = ["rand", "zeroize"] }
|
|
ed25519-bip32 = "0.4"
|
|
aes-gcm = "0.10"
|
|
sha2 = "0.10"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
thiserror = "2"
|
|
zeroize = { version = "1", features = ["derive"] }
|
|
hmac = "0.12"
|
|
rand = "0.8"
|
|
base64 = "0.22"
|
|
secp256k1 = { version = "0.29", optional = true }
|
|
|
|
[dev-dependencies]
|
|
hex = "0.4" |