feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)

2026-09-18 19:12:43 +02:00
parent 80a3bd1911
commit 436790abf0
29 changed files with 1553 additions and 277 deletions
@@ -1052,11 +1052,11 @@ mod tests {

        let salt = generate_salt();
        let kdf_params = KdfParams {
-            memory_cost: 1024,
-            time_cost: 1,
+            memory_cost: crate::crypto::MIN_MEMORY_COST_KIB,
+            time_cost: crate::crypto::MIN_TIME_COST,
            parallelism: 1,
        };
-        let kek = derive_kek("testpwd", &salt, &kdf_params).unwrap();
+        let kek = derive_kek("TestMasterPassword123!", &salt, &kdf_params).unwrap();
        let dek = generate_dek();
        let (wrapped_dek, header_nonce, header_tag) = wrap_dek(&kek, &dek).unwrap();
        db.init_schema(&salt, &kdf_params, &wrapped_dek, &header_nonce, &header_tag)