A Vault File That Fails Closed: Encrypt-then-MAC on an MCU
How a hardware password manager authenticates every vault file before it decrypts: encrypt-then-MAC, verify-before-decrypt, and fail-closed reads.
Notes
#c++
C++ as used in firmware: manual memory layout, avoiding heap allocation where possible, and code verified against real embedded targets.
2 posts about this topic
