Security

SECURITY.md

🔒 Security Notes

⚠️ Limitations

The encryption key is stored in plain .key file (risk of theft).
If encryption_key.key is lost, data cannot be decrypted.
No authentication or integrity protection included.

✅ Recommendations

Use password-based key derivation (PBKDF2/Argon2).
Store keys securely (e.g., HSM, Vault, environment variables).
Add file integrity (MAC).
Consider stronger algorithms (AES-GCM).

📚 References

There aren't any published security advisories