jhkaktus 2ff58441f4 feat: client-side crypto – Argon2id KDF + XChaCha20-Poly1305 AEAD ...

Adds a vanilla ES-module crypto layer for the browser:
- Argon2id (t=2, m=16 MiB, p=1) derives a 256-bit session key from the
  passphrase; the passphrase never leaves the client.
- Records are encrypted with XChaCha20-Poly1305, fresh 24-byte nonce
  per record, per-record salt bound into the AEAD associated data
  together with the uuid (tamper/swap detection).
- Vendored audited @noble/hashes + @noble/ciphers ES modules; verified
  end-to-end in node (encrypt/decrypt roundtrip, wrong key, tampered
  salt, swapped uuid all rejected).

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>

2026-10-11 00:01:30 +02:00

..

vendor

feat: client-side crypto – Argon2id KDF + XChaCha20-Poly1305 AEAD

2026-10-11 00:01:30 +02:00

crypto.js

feat: client-side crypto – Argon2id KDF + XChaCha20-Poly1305 AEAD

2026-10-11 00:01:30 +02:00