🛡️ secure-core

✓ CI Passing🔒 SAST CleanMIT

Enterprise-grade cryptographic primitives and zero-trust authentication middleware for modern security architectures. Built by CyberVault's Open Security Initiative.

🔑 Core Features

• Hardware-backed key derivation (SHA3-256, Argon2id)
• Zero-knowledge proof authentication flows
• Automatic secret rotation & vault integration
• FIPS 140-3 & Common Criteria EAL4+ compliant modules

🚀 Quick Start

npm install @cybervault/secure-core

import { Vault, ZeroTrust } from '@cybervault/secure-core';

const vault = new Vault({
  provider: 'hsm',
  region: 'us-east-1',
  autoRotate: true
});

const auth = new ZeroTrust({
  mfa: 'webauthn',
  deviceBinding: true,
  sessionTimeout: 3600
});

🛡️ Security & Compliance

All cryptographic operations are executed in isolated memory contexts with constant-time comparison routines to prevent timing attacks. Regular third-party audits are published in the audits/ directory.

📧 Report vulnerabilities: security@cybervault.dev (PGP Key available in SECURITY.md)