 swanadiva
|
611b794fc7
|
feat: Phase 2 Security Enhancement
- pkg/crypto: AES-256-GCM encryption with PBKDF2 key derivation
- 100k iterations, 16-byte salt, SHA-256
- Encrypt/Decrypt/IsEncrypted/HashPassword
- Storage layer encryption:
- JSONStorage.SetPassword() enables transparent encrypt/decrypt
- readJSON auto-decrypts, replace* auto-encrypts
- pkg/knownhosts: TOFU host key verification
- Verify/Add/Remove host keys
- HostKeyCallback for SSH config
- SSH client security:
- SetHostKeyCallback() replaces InsecureIgnoreHostKey()
- SetPassphraseCallback() for encrypted private keys
- getKeySigner() tries passphrase on encrypted keys
- Models: AppConfig gains EncryptionEnabled, PasswordHash, KnownHostsFile
|
2026-06-25 13:28:46 +07:00 |
|
|
swanadiva
|
33947816b7
|
feat: complete Tasks 1-3 (setup, models+storage, config management)
- Task 1: Project setup (go.mod, Makefile, .gitignore, main.go)
- Task 2: Core data models (Host, KeyPair, Snippet, AppConfig) + JSON storage layer
- Task 3: Configuration management with cross-platform path support (macOS/Linux/Windows)
- Updated PROJECT_STATE.md with progress tracking
|
2026-06-22 16:09:02 +07:00 |
|