summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2025-10-04Use a tiny read bufferRose Hogenson1-21/+26
2025-10-04Fix testsRose Hogenson1-8/+8
2025-10-04Allow http multipart uploadRose Hogenson5-61/+238
2025-10-01Linked list is cool, but have you heard of arrayRose Hogenson2-52/+48
2025-10-01Fix the n^2 using a linked listRose Hogenson3-88/+103
2025-09-30Allow appending to notesRose Hogenson6-111/+199
Right now it's n^2 which is a big problem (to be fixed later)
2025-09-30Fix a small issue with updating the block indexRose Hogenson1-2/+6
For the reader, we should only update the block index once we've successfully read a block.
2025-09-30Use some standard data structures for readabilityRose Hogenson1-58/+42
2025-09-30Add a benchmarkRose Hogenson1-16/+79
2025-09-30Make the oae2 implementation a bit easier to readRose Hogenson1-89/+89
2025-09-29Implement "online authenticated encryption"Rose Hogenson5-216/+325
2025-09-28Fix vendor hashRose Hogenson2-2/+2
2025-09-28Add a gob APIRose Hogenson8-36/+9011
2025-09-26Turn up all the parametersRose Hogenson2-37/+42
Hopefully this makes it secure 😳
2025-09-25Fix testRose Hogenson1-4/+4
2025-09-25Set read and write timeoutsRose Hogenson1-1/+6
2025-09-25Make CheckPassword a methodRose Hogenson2-5/+5
This works better in godoc
2025-09-25Move complex crypto logic into a helper packageRose Hogenson6-152/+302
2025-09-25Use AES-CTR-HMAC-SHA256 instead of AES-GCMRose Hogenson2-28/+72
2025-09-25Use a slightly more conservative cookie expirationRose Hogenson1-1/+1
2025-09-25Remove temp file on errorRose Hogenson1-0/+2
2025-09-25Use HMAC-SHA256 for authenticationRose Hogenson1-47/+67
2025-09-25Hard-code the redirect pathRose Hogenson2-38/+5
We can add back all that garbage when it's necessary
2025-09-24Rename cmd -> toolsRose Hogenson2-0/+0
2025-09-24Tweak defaultIterations for tanjiroRose Hogenson1-1/+1
2025-09-24Fix the open redirect vulnerabilityRose Hogenson1-5/+36
2025-09-24Use PBKDF2-HMAC-SHA512 for key derivationRose Hogenson2-36/+11
2025-09-24Don't attach CSRF token on loginRose Hogenson1-19/+14
There's just no reason to
2025-09-23Use HKDF to expand key into both auth and encryptRose Hogenson2-23/+57
I guess having the password hash depend on the encryption key isn't a great idea. Let's make them independent using hkdf
2025-09-23Don't reuse cipher.AEAD between threadsRose Hogenson1-19/+34
I'm not sure if it's safe or not, but better to be cautious
2025-09-23Combine password hash and salt secretsRose Hogenson3-8/+6
2025-09-23Use HMAC instead of ed25519Rose Hogenson1-18/+20
2025-09-23Encrypt notepad at restRose Hogenson3-7/+44
2025-09-23Use pbkdf2 for password hashing instead of sha512Rose Hogenson8-10/+129
2025-09-23Add CSRF protectionRose Hogenson2-12/+37
2025-09-20Autofocus password boxRose Hogenson1-1/+1
2025-09-20Ditch HTMXRose Hogenson6-32/+68
2025-09-20Don't use http basic authRose Hogenson3-45/+63
I think http basic auth kind of sucks
2025-09-20Allow basic auth for manual saveRose Hogenson1-1/+1
2025-09-20Revert "Add temporary logging"Rose Hogenson1-7/+0
This reverts commit 413535b9c6d76f57e17bec50131e3144be421c05.
2025-09-20Revert "idk"Rose Hogenson1-1/+1
This reverts commit 88270f9fe48149fb382441466575dbb40744d06d.
2025-09-20idkRose Hogenson1-1/+1
2025-09-20Add temporary loggingRose Hogenson1-0/+7
2025-09-20Add manual saveRose Hogenson1-36/+72
2025-09-20Turn on securityRose Hogenson1-8/+8
2025-09-20Revert "Support systemd dynamic user"Rose Hogenson1-5/+7
This reverts commit 3d0eb1e9d214b8a0652b360313aa2d27eacc3a3a.
2025-09-20Support systemd dynamic userRose Hogenson1-7/+5
2025-09-20Add support for a private notepadRose Hogenson6-6/+228
2025-09-13Fix flakeRose Hogenson2-2/+28
2025-09-07FartRose Hogenson1-0/+0
generated by cgit v1.3.1 (git 2.54.0) at 2026-09-04 08:50:04 +0000