Skip to main content

Module Key

Expand description

Machine-stable 256-bit key derivation for AES-256-GCM.

The key is derived once per process from the host’s hardware UUID using SHA-256: key = SHA-256("Land-Encryption-v1" ++ machine_id).

Rationale: using the machine ID means ciphertext produced by encryption:encrypt survives process restarts (same key each time) but cannot be decrypted on a different machine, matching VS Code’s dpapi/safeStorage semantics. No HSM or external key storage required.

Statics§

DERIVED_KEY 🔒

Functions§

ComputeKey 🔒
DeriveKey
Returns the process-wide 256-bit encryption key.
ReadMachineId 🔒