Secrets tied to silicon: Machine-locked cryptography with Wauth
Si un atacante roba la copia de seguridad de tu base de datos o se filtran variables de entorno, ¿puede descifrar tus claves de API? Con wauth , las claves criptográficas se derivan directamente del hardware del host, inutilizando por completo los baúles en cualquier otra máquina. Este es el Día 01 de la serie técnica WAuth Open Source (MIT, AES-256 Fernet, SQLite local cifrado). Implementación…
WAuth is an open-source tool that derives cryptographic keys directly from a host's hardware, making it impossible to use stolen backups or environment variables to decipher API keys. The tool uses a combination of UUID and processor-specific salt to generate 32-byte Fernet symmetric keys. WAuth stores encrypted secrets in local SQLite databases with protected rotation, neutralizing vectors of attack such as exposed secrets in stolen backups or accidentally leaked commits.
The code is available on GitHub and PyPI, and was created by William Steve Rodríguez Villamizar, also known as Wisrovi.
Written by urgent.news from Dev.to's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.
