halkyon/packages/halkyon_base_server/test/unit/totp
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Tizian 「ティツィアーン」 7ad0f92f23
feat(crypto): recovery codes kept under the instance's key
A code holds 40 bits, which plain SHA-256 hashes in a leaked database
would give up to guessing; HMAC-SHA256 under a key of the instance kept
outside the database (recoveryCodeKey, at least 32 characters) gives
nothing to guess against without it. Decided 20 Oct 2026.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
2026-10-22 18:11:10 +02:00
..
recovery_codes_test.dart feat(crypto): recovery codes kept under the instance's key 2026-10-22 18:11:10 +02:00
totp_test.dart feat(crypto): TOTP and recovery codes 2026-10-22 18:11:09 +02:00