feat: on-disk encryption (XChaCha20-Poly1305, envelope keys, O(1) rotation) - #85

Merged

Xof merged 43 commits into

mainfrom

feature/on-disk-encryption

Jul 1, 2026

Commits on Jun 30, 2026

docs: design spec for on-disk encryption (XChaCha20-Poly1305, envelope keys)
Xof
committed
17a73a3
docs: implementation plan for on-disk encryption (6 phases, 29 tasks)
Xof
committed
8564e38
build: add RustCrypto deps and register crypto core module
Xof
committed
6b3c33e
feat(error): add encryption error variants (NoEncryptionKey, InvalidEncryptionKey, EncryptionNotSupported, NoFreeKeySlot, LastKeySlot, fatal DecryptionFailed)
Xof
committed
845948e
feat(crypto): key types, KdfId, Argon2Params, CryptoError, OS randomness
Xof
committed
8269f22
feat(crypto): derive_kek dispatching HKDF-SHA256 and Argon2id
Xof
committed
758dca2
fix(crypto): prevent key-byte leakage in Kek Debug and KDF output buffer
Xof
committed
70f24c5
feat(crypto): DEK wrap/unwrap under KEK with detached XChaCha20-Poly1305
Xof
committed
aa90bc0
fix(crypto): zeroize decrypted DEK plaintext from open_detached
Xof
committed
a02b2ec
feat(crypto): PageCipher whole-page and body seal/open
Xof
committed
196c04e
test(crypto): zeroization guards; clippy/fmt clean for crypto core
Xof
committed
9b1fa71
feat(superblock): add crypto-header key-slot table in the reserved region
Xof
committed
8e9ca00
feat(superblock): DEK-sealed body and Superblock.encryption field
Xof
committed
44e9aa2
fix(superblock): bounds-check sealed-body ct_len before slicing
Xof
committed
700f0d0
feat(engine): create encrypted database — wrap DEK into slot 0, stamp MAJOR=2
Xof
committed
ccd523b
test(superblock): assert encrypted named_roots name is absent from cleartext
Xof
committed
9a2a663
feat(engine): open encrypted database — unwrap DEK from key-slot, decrypt body, gate MAJOR=2
Xof
committed
b0cfd06
fix(recovery): select winning superblock buffer directly for encrypted-body decrypt
Xof
committed
7810428
test(engine): verify session DEK lifetime — cipher Some/None structural invariants
Xof
committed
be3993e
feat(page_io): stride-aware raw on-disk page units (8232 encrypted, 8192 plaintext)
Xof
committed
815a9e1
feat(spillway): parameterize slot by payload_size for sealed-blob support
Xof
committed
c3faf2b
feat(page_cache): wire PageCipher seal/open + uniform 8232 stride (Task 3.3)
Xof
committed
37ba983
feat(page_cache): seal-once on evict-to-spillway; verbatim copy on drain
Xof
committed
c66479b
feat(api): expose Key/Argon2Params publicly, add argon2_params to Options
Xof
committed
63b03e5

Commits on Jul 1, 2026