[emanuele-em]

Per-bucket DEKs with HKDF, hashed policy keys to kill enumeration, HMAC audit chain. This is the kind of boring-correct crypto design I rarely see in Go libraries. memguard for the master key is a nice touch too.

[babawere]

I was thinking its better to be boring-correct :)

[emanuele-em]

yes I totally agree, my message was a compliment :)