README (1031B)
1 The keystore module provides a means of securely storing private information, 2 ideally through the assistance of operating system key storage facilities. The 3 purpose of this feature is to store private data without keeping it in the 4 process's address space, so that bugs which can lead to reading process memory 5 cannot recover the key while it's not actively in use. 6 7 On platforms without a suitable feature, a fallback implementation stores the 8 secrets in the process heap, providing no security. This is an opportunistic API 9 which allows your program to take advantage of these features if available. 10 11 This is a low-level module which implements cryptographic primitives. Direct use 12 of cryptographic primitives is not recommended for non-experts, as incorrect use 13 of these primitives can easily lead to the introduction of security 14 vulnerabilities. Non-experts are advised to use the high-level operations 15 available in the top-level [[crypto::]] module. 16 17 Be advised that Hare's cryptography implementations have not been audited.