Skip to content

feat(core): vaulted and vaultless tokenization - #18

Merged
GoDeskio merged 1 commit into
mainfrom
feat/tokenization
Nov 5, 2026
Merged

GoDeskio merged 1 commit into
mainfrom
feat/tokenization

Conversation

@GoDeskio

Copy link
Copy Markdown
Owner

Backlog #8. Stacked on #17 (FF1).

  • Vault: random tok_ tokens. Values are stored sealed with XChaCha20-Poly1305, with AAD bound to the token.
  • Optional deterministic mode reuses tokens for equal values via an HMAC fingerprint, so joins still work.
  • revoke supports right-to-erasure. A TokenStore trait lets a database backend plug in later.
  • Vaultless: FF1 digit tokens that keep the last N digits in clear. The clear suffix is bound into the tweak.

Tests pass and clippy is clean.

@GoDeskio
GoDeskio changed the base branch from feat/ff1-fpe to main November 5, 2026 10:43
@GoDeskio
GoDeskio merged commit ef3bdb9 into main Nov 5, 2026
6 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant