security: review cryptographic implementations #1

New issue

Closed

opened 2026-02-16 17:01:36 +00:00 by Clotho · 0 comments

Clotho commented

2026-02-16 17:01:36 +00:00

Member

Security audit of core/go-crypt. Check:

Key generation uses cryptographically secure random sources
No hardcoded keys, salts, or IVs
Deprecated algorithms are flagged (MD5, SHA1 for signing, etc.)
Error handling doesn't leak sensitive data
Memory handling — sensitive data cleared after use where possible

Post findings as a comment. Do not make code changes.

Security audit of core/go-crypt. Check: 1. Key generation uses cryptographically secure random sources 2. No hardcoded keys, salts, or IVs 3. Deprecated algorithms are flagged (MD5, SHA1 for signing, etc.) 4. Error handling doesn't leak sensitive data 5. Memory handling — sensitive data cleared after use where possible Post findings as a comment. Do not make code changes.