Skip to content

feat(platform-wallet): keyring_core secret backends — encrypted-file + OS keyring (secrets feature) #3672

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lklimek merged 58 commits into from
May 29, 2026
+4,928 −67
Merged

feat(platform-wallet): keyring_core secret backends — encrypted-file + OS keyring (secrets feature) #3672

Show file tree
Hide file tree
Changes from 55 commits
Commits
Show all changes
58 commits
Select commit Hold shift + click to select a range
72a4eca
feat(platform-wallet-storage): SecretStore foundation — zeroizing wra…
lklimek May 19, 2026
183c9f3
feat(platform-wallet-storage): EncryptedFileStore — Argon2id + XChaCh…
lklimek May 19, 2026
bfbb551
feat(platform-wallet-storage): KeyringStore — OS keyring backend (key…
lklimek May 19, 2026
e3ac1a6
test(platform-wallet-storage): positive secrets guard + API-shape int…
lklimek May 19, 2026
029753f
ci(platform-wallet-storage): cargo-deny advisories gate covering the …
lklimek May 19, 2026
1c55f89
fix(platform-wallet-storage): passphrase-verification token + hardene…
lklimek May 19, 2026
0a7c3f0
fix(platform-wallet-storage): map keyring-core NoStorageAccess to Key…
lklimek May 19, 2026
884d470
fix(platform-wallet-storage): MemoryStore stores SecretBytes so it ze…
lklimek May 19, 2026
1256cb8
docs(platform-wallet-storage): correct keyring-core attribution in Ca…
lklimek May 19, 2026
1c29698
docs(platform-wallet-storage): SECRETS.md reflects the delivered Secr…
lklimek May 19, 2026
2c7927b
chore(platform-wallet-storage,ci): drop cargo-deny, flip secrets defa…
lklimek May 20, 2026
123f908
refactor(platform-wallet-storage): adopt keyring_core SPI for secret …
lklimek May 20, 2026
f733d38
docs(platform-wallet-storage): SECRETS.md + lib root reflect keyring_…
lklimek May 20, 2026
18a0655
test(platform-wallet-storage): default-build proof for the secrets su…
lklimek May 20, 2026
3eefec2
fix(platform-wallet-storage): forbid == on SecretBytes/SecretString (…
lklimek May 20, 2026
e93dfc7
Merge branch 'feat/platform-wallet-sqlite-persistor' into feat/platfo…
lklimek May 22, 2026
8a5ef7a
fix(platform-wallet-storage): rekey returns FileStoreError::Busy inst…
lklimek May 22, 2026
b6a84fd
refactor(platform-wallet-storage)!: unify FileStoreError, drop error_…
lklimek May 22, 2026
647567e
fix(platform-wallet-storage): remove redundant SecretString Drop (UB)…
lklimek May 22, 2026
8ab4208
feat(platform-wallet-storage)!: serde_json vault format with versione…
lklimek May 22, 2026
68ed3d1
fix(platform-wallet-storage): cross-platform atomic vault write via N…
lklimek May 22, 2026
0066a5a
feat(platform-wallet-storage)!: public SecretStore API exposing Secre…
lklimek May 22, 2026
c636ac0
refactor(platform-wallet-storage): string-only keyring_core From; typ…
lklimek May 22, 2026
a5c5bf0
fix(platform-wallet-storage): box typed FileStoreError into keyring_c…
lklimek May 22, 2026
e1c7fa9
refactor(platform-wallet-storage): remove MemoryCredentialStore; reti…
lklimek May 22, 2026
671ce69
fix(platform-wallet-storage): enforce lowercase-hex service, widen ex…
lklimek May 22, 2026
dc492cc
docs(platform-wallet-storage): strip historical comments + license he…
lklimek May 22, 2026
c58a2b5
feat(platform-wallet-storage): log swallowed mlock + corruption/write…
lklimek May 22, 2026
6aa2942
docs(platform-wallet-storage): drop deleted MemoryCredentialStore / _…
lklimek May 22, 2026
34c8ecb
Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-pers…
lklimek May 25, 2026
db7b6b5
Merge branch 'feat/platform-wallet-sqlite-persistor' into feat/platfo…
lklimek May 26, 2026
e7e1de8
Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-pers…
lklimek May 27, 2026
680155f
Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-pers…
lklimek May 27, 2026
4bfafa5
refactor(platform-wallet-storage): introduce const-generic hex_array …
lklimek May 27, 2026
648baa6
refactor(platform-wallet-storage): collapse Entry/EntryRecord — serde…
lklimek May 27, 2026
58f7bcd
refactor(platform-wallet-storage): collapse Header/VaultFile into sin…
lklimek May 27, 2026
9884f22
refactor(platform-wallet-storage): collapse KdfDescriptor into KdfParams
lklimek May 27, 2026
2118f7e
fix(platform-wallet-storage): harden secrets vault RMW + perms + TOCT…
lklimek May 27, 2026
6ff4c77
refactor(platform-wallet-storage): keep secret types end-to-end throu…
lklimek May 27, 2026
1666dcd
refactor(platform-wallet-storage): collapse Vault.entries to BTreeMap…
lklimek May 27, 2026
f4a9a92
refactor(platform-wallet-storage): code-quality polish + Windows ACL …
lklimek May 27, 2026
f0f69fa
fix(platform-wallet-storage): enable apple-native-keyring-store keych…
lklimek May 27, 2026
48b0749
fix(platform-wallet-storage): apple-native Store lives under keychain…
lklimek May 27, 2026
6ca1bc1
fix(platform-wallet-ffi): drop From<String> usage in shielded FFI loa…
lklimek May 27, 2026
b280ca0
fix(platform-wallet-storage): pasta review wave — per-vault passphras…
lklimek May 28, 2026
a9f12d2
refactor(platform-wallet-storage): collapse encrypted-file store to s…
lklimek May 28, 2026
5041aa1
Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-pers…
lklimek May 28, 2026
e03c500
refactor(platform-wallet-storage): resident-vault model — lock-on-ope…
lklimek May 28, 2026
aab00e6
Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-pers…
lklimek May 28, 2026
17653ba
Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-pers…
lklimek May 28, 2026
5cfdf29
Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-pers…
lklimek May 28, 2026
e005f20
test(platform-wallet-storage): make kv default-feature check tolerant…
lklimek May 28, 2026
c3c49db
docs(platform-wallet-storage): mark Windows set_restrictive_perms def…
lklimek May 29, 2026
0b6d544
fix(platform-wallet-storage): collapse EncryptedFileStoreInner state …
lklimek May 29, 2026
e279e25
fix(platform-wallet-storage): validate wallet-id hex and label shape …
lklimek May 29, 2026
78e6f64
test(platform-wallet-storage): drop kv-in-default-set assertion (lkli…
lklimek May 29, 2026
37f71fa
refactor(platform-wallet-storage): collapse InnerState into Encrypted…
lklimek May 29, 2026
a0c065b
refactor(platform-wallet-storage): replace free *_locked helpers with…
lklimek May 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
192 changes: 191 additions & 1 deletion Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading