coffio/README.md
Rodolphe Bréard 62b749744c First commit
2024-02-14 18:16:45 +01:00

1.5 KiB

Coffio

License MIT OR Apache 2.0

Abstraction layer for symmetric data encryption, primarily designed for database column encryption.

Disclaimer

⚠️ DANGER: DRAGONS A(H)EAD! 🐲

This crate is experimental and has never been audited by an independent security professional. You should therefore NOT use it in production.

Although this crate aim to reduce the risk of misuse, it is still possible to use it in such a way that the cryptography it uses does not provides all the security guaranties you need. Ask your cryptographer if this crate is relevant to your use case and if you are using it correctly.

Frequently Asked Questions

Should I use this project?

Not yet.

Why shouldn't I directly use a symmetric encryption function instead of this crate?

Cryptography is hard and, even if you some knowledge about it and pay attention, you may misuse it.

Why is the context so important?

It helps preventing a confused deputy attack.

Where does the name coffio comes from?

It is a french slang for a safe or a strongbox. See coffio on the french Wiktionary.