Module encryption 

Structs

Argon2Params

Argon2 password hash parameters.

Functions

aes_gcm_decrypt

aes_gcm_encrypt

argon2id_hash

hkdf_extract

HKDF extract step. Per coding_agent_session_search-vz9t8.4, instrumented with safe tracing — only lengths are recorded.

hkdf_extract_expand

HKDF-SHA256 extract+expand. Per coding_agent_session_search-vz9t8.4, this function is instrumented with safe-to-log tracing: only operation name + lengths are recorded; the IKM, salt, info, and output bytes are NEVER logged. The info argument is treated as a domain-separation LABEL; if and only if it contains valid UTF-8 AND is short (≤64 bytes), it is logged for forensics. Otherwise it is replaced with a length-only summary.