llm-config-crypto 0.5.0

Cryptography primitives for LLM Config Manager - AES-256-GCM encryption, key derivation, and secure key management
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

# llm-config-crypto

[![Crates.io](https://img.shields.io/crates/v/llm-config-crypto.svg)](https://crates.io/crates/llm-config-crypto)
[![Documentation](https://docs.rs/llm-config-crypto/badge.svg)](https://docs.rs/llm-config-crypto)
[![License](https://img.shields.io/crates/l/llm-config-crypto.svg)](https://github.com/globalbusinessadvisors/llm-config-manager/blob/main/LICENSE)

Cryptography primitives for LLM Config Manager providing AES-256-GCM encryption, key derivation, and secure key management.

## Features

- **AES-256-GCM Encryption**: Industry-standard encryption for configuration secrets
- **Secure Key Derivation**: Argon2id-based key derivation from passwords
- **Key Management**: Secure generation, storage, and rotation of encryption keys
- **Zero-Copy Security**: Zeroization of sensitive data in memory
- **ChaCha20-Poly1305**: Alternative cipher for high-performance scenarios

## Usage

Add this to your `Cargo.toml`:

```toml
[dependencies]
llm-config-crypto = "0.5.0"
```

### Basic Example

```rust
use llm_config_crypto::{CryptoManager, KeyDerivation};

// Create a crypto manager
let crypto = CryptoManager::new()?;

// Encrypt sensitive data
let plaintext = b"my-secret-value";
let encrypted = crypto.encrypt(plaintext)?;

// Decrypt data
let decrypted = crypto.decrypt(&encrypted)?;
assert_eq!(plaintext, decrypted.as_slice());
```

### Key Derivation

```rust
use llm_config_crypto::KeyDerivation;

// Derive a key from a password
let password = "my-secure-password";
let salt = KeyDerivation::generate_salt()?;
let key = KeyDerivation::derive_key(password, &salt)?;
```

## Security Features

- **AEAD**: Authenticated encryption with associated data
- **Constant-time operations**: Prevents timing attacks
- **Automatic zeroization**: Sensitive data cleared from memory
- **Secure random**: Cryptographically secure random number generation

## Performance

Benchmarks on modern hardware:
- Encryption (1KB): ~20 µs
- Decryption (1KB): ~20 µs
- Key derivation: ~100 ms (tuned for security)

## Minimum Supported Rust Version

This crate requires Rust 1.75 or later.

## License

Licensed under the Apache License, Version 2.0. See [LICENSE](../../LICENSE) for details.

## Contributing

See [CONTRIBUTING.md](../../docs/CONTRIBUTING.md) for contribution guidelines.