[ES] Secretos ligados al silicio: Criptografía machine-locked con wauth

In the realm of cybersecurity, a new open-source tool called wauth is making waves. This innovative software ensures machine-bound, hardware-derived cryptographic keys, effectively eliminating the possibility of unauthorized access to API keys, even in the event of a security breach.

The tool's core mechanism lies in its unique approach to key derivation, which combines a universally unique identifier (UUID), a specific processor chip salt, and a processor board salt to generate 32-byte symmetric Fernet keys. This process ensures that the keys are bound to the hardware of the host machine, rendering them unusable on any other machine.

One of the key advantages of wauth is its hardware-bound key derivation, which generates keys that can only be decrypted on the same machine they were created on. This ensures zero unauthorized portability, as an attacker cannot extract a key from one machine and use it on another without the corresponding hardware footprint.

Furthermore, wauth employs zero plaintext-at-rest secrets, storing all secrets securely in local SQLite databases with protected rotation. This method negates the risk of secrets being exposed through stolen database backups or accidental commits. Additionally, the tool eliminates the need for a local cryptographic vault by providing cryptographic keys directly from the hardware, making it an ideal solution for edge nodes, IoT devices, and on-premise servers.

wauth is written in Python and is available on PyPI. Created by William Steve Rodríguez Villamizar, also known as Wisrovi, the tool is open-source and can be accessed on GitHub. Its implementation showcases the power of hardware-bound cryptography in safeguarding sensitive API keys and other critical secrets.