crypto

Overview ¶

Package crypto provides AES-256-GCM encryption for sensitive stored values. The encryption key is loaded from the SCANORAMA_SECRET_KEY environment variable (exactly 64 hex characters = 32 bytes). If the variable is absent, a random ephemeral key is generated and a warning is logged — credentials encrypted with an ephemeral key are lost on restart, so set the variable in production.