keyarc-crypto-flows

What problem does it solve?

This Skill provides a ready-to-use blueprint for implementing zero-knowledge cryptographic workflows in KeyArc, enabling secure client-side key generation, derivation, and sharing patterns without exposing secrets to the server.

Core Features & Use Cases

• Signup flow: Derive a master key with Argon2, generate vault and RSA keys, and securely store encrypted assets on the client.
• Login flow: Re-derive keys from the password, validate authentication via a hashed blob, and decrypt vault data on the client.
• Team sharing: Encrypt and securely share team keys using RSA-OAEP, and rotate keys for new members.
• Tech patterns: Argon2id for key derivation, AES-256-GCM for data, RSA-OAEP for sharing, all using the WebCrypto API.
• These patterns maintain zero-knowledge since servers only see encrypted data.

Quick Start

Implement the signup, login, and team-sharing patterns described in the SKILL.md, focusing on client-side key generation and deterministic flows.