Encryption Patterns

Reference Repositories

When working with encryption, consult these repositories for patterns and documentation:

noble-ciphers : Audited JS implementation of ChaCha, Salsa, AES (our crypto primitive library)
libsodium : Crypto primitives, secretbox/AEAD patterns, XChaCha20-Poly1305
Signal Protocol (libsignal) : Key hierarchy, HKDF usage, Double Ratchet, message encryption
Vault Transit : Key versioning, rotation, ciphertext format (vault:v1:base64)
Bitwarden : Client-side vault encryption, key hierarchy (master key -> org key -> cipher key)
AWS KMS : Envelope encryption patterns, key rotation lifecycle
age : Simple file encryption design philosophy