Skip to content

feat(crypto): add shared encryption cipher#1169

Merged
HaiHui886 merged 1 commit into
mainfrom
sync_mr_2602_40525b1
Jun 15, 2026
Merged

feat(crypto): add shared encryption cipher#1169
HaiHui886 merged 1 commit into
mainfrom
sync_mr_2602_40525b1

Conversation

@csg-pr-bot

Copy link
Copy Markdown
Collaborator

Summary:

  • Introduces a new common/utils/cryptox module to provide a unified, centralized solution for symmetric encryption of sensitive data (e.g., tokens, credentials), preventing fragmented implementations and technical debt across modules.
  • Implements a secure key derivation workflow using HKDF-SHA256 and AES-256-GCM, where encryption keys are dynamically derived from a MasterKey, Salt, and explicit business scopes to ensure domain isolation and prevent key reuse collisions.
  • Features a versioned ciphertext format (v1:) and strict scope validation to enable future algorithm upgrades or key rotation strategies without breaking existing encrypted data.

@csg-pr-bot

Copy link
Copy Markdown
Collaborator Author

Depends on #1167

@HaiHui886 HaiHui886 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@HaiHui886 HaiHui886 merged commit e776704 into main Jun 15, 2026
7 checks passed
@HaiHui886 HaiHui886 deleted the sync_mr_2602_40525b1 branch June 15, 2026 00:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants