Comment on Show HN: Keeper – embedded secret store for Go (help me break it)Comments−emanuele-em5moPer-bucket DEKs with HKDF, hashed policy keys to kill enumeration, HMAC audit chain. This is the kind of boring-correct crypto design I rarely see in Go libraries. memguard for the master key is a nice touch too.−babawereOP5moI was thinking its better to be boring-correct :)−emanuele-em5moyes I totally agree, my message was a compliment :)
Comments
Per-bucket DEKs with HKDF, hashed policy keys to kill enumeration, HMAC audit chain. This is the kind of boring-correct crypto design I rarely see in Go libraries. memguard for the master key is a nice touch too.
I was thinking its better to be boring-correct :)
yes I totally agree, my message was a compliment :)