mirror of
https://github.com/silicoflare/confidant.git
synced 2026-05-26 12:45:24 +05:30
fix: refactor confidant.ts and add extra security feature in README
This commit is contained in:
@@ -25,6 +25,7 @@ The vault has several layers of security to ensure that the contents are safe. T
|
||||
2. **AES256**: The vault is encrypted using the AES256 algorithm, which is a symmetric encryption algorithm. The key is generated using the ECDH algorithm.
|
||||
3. **PBKDF2**: The password is hashed using the PBKDF2 algorithm, which is a key derivation function. This ensures that the password is not stored in plain text.
|
||||
4. **HMAC-SHA256**: The keys are encrypted using the HMAC-SHA256 algorithm, which is a hash-based message authentication code. This ensures that the keys are unique and cannot be tampered with.
|
||||
5. **Unique build parameters:** Every binary built by you from source has completely unique parameters in the `env.ts` file, which means ONLY that binary can be used to decrypt a vault made with the binary.
|
||||
|
||||
---
|
||||
|
||||
|
||||
@@ -5,8 +5,8 @@ import { $ } from "bun";
|
||||
import chalk from "chalk-template";
|
||||
import { Command } from "commander";
|
||||
import { decrypt_vault, encrypt_vault, initialize, reset } from "./src/main";
|
||||
import { existsSync, readdirSync } from "fs";
|
||||
import checkForFiles, {
|
||||
import { readdirSync } from "fs";
|
||||
import {
|
||||
Files,
|
||||
getDecryptedName,
|
||||
getDirectoryNames,
|
||||
@@ -15,7 +15,6 @@ import checkForFiles, {
|
||||
log,
|
||||
panic,
|
||||
} from "./src/utils";
|
||||
import { randomBytes } from "crypto";
|
||||
|
||||
const program = new Command();
|
||||
const { exit } = process;
|
||||
|
||||
Reference in New Issue
Block a user