d1eb01799f
- SecretsManager: raw key stored in Zeroizing<[u8; 32]>, auto-zeroed on drop - SecretsManager: replaced thread_rng with OsRng (CSPRNG) for nonces - Remember-me secret: derived from machine-id via SHA-256 (deterministic, no plaintext key storage) - Bitcoin ecash balance: uses checked_add with u64::MAX saturation on overflow - TOTP setup/confirm: added to EndpointRateLimiter (3 and 5 per 5min) - AppId validation and Tor service name validation already existed Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
27 lines
551 B
TOML
27 lines
551 B
TOML
[package]
|
|
name = "archipelago-security"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
|
|
[dependencies]
|
|
tokio = { version = "1", features = ["full"] }
|
|
serde = { version = "1.0", features = ["derive"] }
|
|
anyhow = "1.0"
|
|
thiserror = "1.0"
|
|
log = "0.4"
|
|
tracing = "0.1"
|
|
uuid = { version = "1.0", features = ["v4"] }
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
serde_json = "1.0"
|
|
aes-gcm = "0.10"
|
|
rand = "0.8"
|
|
hex = "0.4"
|
|
zeroize = { version = "1", features = ["derive"] }
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
|
|
[lib]
|
|
name = "archipelago_security"
|
|
path = "src/lib.rs"
|