RomanNum3ral
/
Cybersecurity-Projects
mirror of https://github.com/CarterPerez-dev/Cybersecurity-Projects.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Cybersecurity-Projects/PROJECTS/intermediate/credential-rotation-enforcer
History
CarterPerez-dev fe5e9cd07b feat(audit): hash chain + HMAC ratchet + Merkle batches + Ed25519 signing 
Three layers of integrity:
- Hash chain (SHA-256 chained) catches silent edits
- HMAC ratchet rotates keys every N entries with HKDF-style derivation
  and zeroizes old key bytes from memory
- Merkle batch sealing builds tree over content_hashes, signs root
  with Ed25519 (FFI to libcrypto EVP_PKEY_ED25519 directly since stdlib
  lacks the high-level OpenSSL::PKey wrapper)

AuditLog.append is mutex-guarded for serial writes; verify_chain detects
both single-row tampering and structural inconsistency. BatchSealer's
pack_message format (BE start_seq || BE end_seq || merkle_root) is shared
between signer and verifier so external auditors can validate offline.
 		2026-04-29 00:45:54 -04:00
..
.github/workflows feat(cre): source tree skeleton with empty module dirs and CI workflow 2026-04-28 23:54:59 -04:00
spec feat(audit): hash chain + HMAC ratchet + Merkle batches + Ed25519 signing 2026-04-29 00:45:54 -04:00
src feat(audit): hash chain + HMAC ratchet + Merkle batches + Ed25519 signing 2026-04-29 00:45:54 -04:00
.editorconfig feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
.gitignore feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
LICENSE feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
Makefile feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
README.md feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
shard.lock feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00
shard.yml feat(cre): bootstrap Crystal project shell 2026-04-28 18:05:36 -04:00

README.md

Credential Rotation Enforcer (cre)

A Crystal-based daemon that tracks and enforces credential rotation policies across AWS Secrets Manager, HashiCorp Vault, GitHub fine-grained PATs, and local .env files.

Full README, asciinema demos, and walkthrough live in learn/. This README will be expanded in Phase 16 of the build.