ADR 0017's step 1, on libsodium (sodium 4.1.0+1, whose build hook compiles the libsodium 1.0.22 it ships: a C compiler and make wherever it builds): - Argon2id (64 MiB, 3 passes, kept with the account and never below that) makes a master key, which libsodium's KDF splits into SRP's secret (x) and the key-encryption key. - The account's X25519 and Ed25519 key pairs, their private halves wrapped with XChaCha20-Poly1305 under the KEK and under the recovery key, bound to their public keys. - A 24-word BIP-39 recovery phrase (the English list, MIT) and the recovery key derived from it. - Data keys sealed to the account with crypto_box_seal, bound to their IDs; content in ADR 0002's envelope, encrypted with a data key and signed with Ed25519 (detached), bound to a context the caller names. - Secrets in libsodium's guarded memory where its API takes them. - Tests: libsodium's Argon2id known answers, BIP-39's English vectors, round trips and every refusal. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
37 lines
1 KiB
Text
37 lines
1 KiB
Text
# The Docker build context is the repository root. Nothing secret, local or bulky
|
|
# goes into it: Learn's server's and curator's Dockerfiles copy their whole package
|
|
# folders (and the server the module it builds on, with the module's client, which the
|
|
# module's tests depend on).
|
|
|
|
# Secrets and local state
|
|
**/config/passwords.yaml
|
|
# Dictionary files: tens of megabytes, mounted on an instance, never built in
|
|
apps/learn/halkyon_learn_server/dictionaries/
|
|
deploy/dictionaries/
|
|
# Published studysets' repositories of a development server
|
|
apps/learn/halkyon_learn_server/repositories/
|
|
apps/learn/halkyon_learn_server/.serverpod/
|
|
deploy/.env
|
|
**/*.log
|
|
|
|
# Tooling and build output
|
|
.git/
|
|
**/.dart_tool/
|
|
**/build/
|
|
.vscode/
|
|
.claude/
|
|
|
|
# Not needed to build the server or the curator
|
|
apps/learn/halkyon_learn_flutter/
|
|
apps/learn/halkyon_learn_client/
|
|
apps/learn/tool/
|
|
apps/todo/
|
|
packages/halkyon_app/
|
|
packages/halkyon_core/
|
|
packages/halkyon_interop/
|
|
packages/halkyon_keys/
|
|
packages/halkyon_ui/
|
|
docs/
|
|
snap/
|
|
NEXT.md
|
|
SHARED-PACKAGES.md
|