nvrl 325c326c49 feat(account): hold key passphrases as wiped secrets and report a locked account as KeysLocked ...

A wrong mailbox password surfaced as InvalidOperation("no active user key could
be unlocked"), which a caller could only recognise by its text. It is now
ProtonError::KeysLocked, and AccountClient::unlock() checks a secret with a
single core/v4/users request instead of loading every address.

Derived passphrases, the mailbox password and the cache encryption key were
plain Vec<u8>s, cloned freely and never wiped. They are Zeroizing now, and the
passphrase map is KeyPassphrases: wiped on drop, redacted in Debug, with
derive_secret() for a client that wants a key only an unlocked account can
reproduce. with_key_passphrases takes it.

Breaking: ProtonError gains a variant, key_passphrases() and
with_key_passphrases() change type, and derive_key_passphrase returns
Zeroizing<Vec<u8>>.

2026-10-07 02:24:51 +02:00

..

examples

renamed for crate

2026-06-28 11:47:54 +02:00

src

feat(account): hold key passphrases as wiped secrets and report a locked account as KeysLocked

2026-10-07 02:24:51 +02:00

tests

fix(drive): give each share root its own parent key in batch enumeration

2026-10-01 18:06:58 +02:00

Cargo.toml

feat(account): hold key passphrases as wiped secrets and report a locked account as KeysLocked

2026-10-07 02:24:51 +02:00

LICENSE

renamed for crate

2026-06-28 11:47:54 +02:00