
HamzaandClaude Opus 4.8
f3383c3cf8
feat(security): field encryption AES-256-GCM + random IV (at-rest)
- common/crypto/crypto.util.ts: encrypt/decrypt (GCM, random 96-bit IV), format v1:base64(iv|tag|ct)
- EncryptedTransformer applied to users.name + drivers.vehicle_plate (auto, no service change)
- blindIndex (HMAC) helper for future searchable-field encryption (phone)
- tolerant decrypt for legacy plaintext → no migration needed (varchar holds base64)
- ENCRYPTION_KEY env + boot warning if unset; docs/16-encryption.md
- fixes Siro's documented CBC+fixed-IV flaw
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-16 19:24:27 +03:00
..
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 18:06:24 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 15:22:06 +03:00
2026-07-16 19:24:27 +03:00
2026-07-16 15:22:06 +03:00