secrets
Secure storage for cryptographic secrets in Rust (by stouset)
stronghold.rs
Stronghold is a secret management engine written in rust. (by iotaledger)
| secrets | stronghold.rs | |
|---|---|---|
| 1 | 5 | |
| 198 | 496 | |
| - | 1.6% | |
| 0.0 | 2.3 | |
| 11 months ago | 12 days ago | |
| Rust | Rust | |
| GNU General Public License v3.0 or later | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
secrets
Posts with mentions or reviews of secrets.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-08-19.
-
New very promising Linux syscall for creating secret memory even the kernel cant read. I'll be working for creating a crate for using it out.
I have thought extremely hard about this and implemented the following API for this problem: https://github.com/stouset/secrets
stronghold.rs
Posts with mentions or reviews of stronghold.rs.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-09-04.
-
Meet the Team: Matthias & Knowledge Transfer
Matthias: I was working as a security engineer at the IOTA foundation, specifically for the project Stronghold - a software-based enclave for sensitive data — alongside Daniel [Thompson-Yvetot, now CEO of CrabNebula], who was leading the project before I took over. I really had fun working in the field of (software) security, and wanted to continue to deepen my skills as well as going deeper on specific topics. The foundation had switched its internal focus, and at that time Daniel reached out and offered me the opportunity to be part of the newly-found security team and be part of the group shaping its direction for the future. This appealed to me and my own goals, and now here I am.
-
Firefly
Software profiles use stronghold.rs as a secret management store for your seed and private keys, and it requires a password to "unlock" so that you can use your wallets / accounts. Even if someone stole your computer and accessed your Firefly wallet, they would NOT be able to send funds on your behalf as they would need to unlock the Stronghold, which requires a password. The data itself sits in isolated, encrypted memory within your computer so even more advanced attackers wouldn't be able to find this data and decrypt it effectively (since they need that password).
-
New very promising Linux syscall for creating secret memory even the kernel cant read. I'll be working for creating a crate for using it out.
I’m working on for the IOTA Foundation (cryptocurrency non-profit) on the new wallet, and learning Rust in the process. We have a library we use called Stronghold that handles all of the private key / seed data in isolated memory. I don’t know on a low level how it works (will eventually learn), but it may be worth looking at. It’s branded as a “secret management engine written in Rust”.
-
Capture the Flag challenge : Shut up and take my $5000
Somewhere, hidden in the blog page of the IOTA stronghold release, you can discover a flag (clue) that will help you to find a Stronghold Snapshot. This snapshot was created using the Stronghold CLI at git revision 93d1dfa12235f4c769a714a1cf39a4222b4ecc27 . Once you find it, the rest of the CTF is 100% self-contained in that snapshot. In other words, there are no external resources available anywhere to help you, so really, do not waste your time trying to break into any other systems.
-
IOTA Stronghold: Beta Release
You can win $5000, first one who solves the puzzle https://github.com/iotaledger/stronghold.rs/discussions/174
What are some alternatives?
When comparing secrets and stronghold.rs you can also consider the following projects:
stupidalloc - A stupid Rust memory allocator
platform-compat - Roslyn analyzer that finds usages of APIs that will throw PlatformNotSupportedException on certain platforms.
nosecmem - Demonstrate ability to read memfd_secret() data from the kernel
memory_pages - `memory_pages` is a small library provinig a cross-platform API to request pages from kernel with certain premisions