{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"A keyring backend that stores passwords in an encrypted file using Argon2 key derivation and authenticated AES encryption, integrating with the keyring package for portable credential storage.","skillfed_tags":["credential-storage","encryption","portable-keyring"],"use_cases":["Store API keys and database passwords in a portable encrypted file for development environments without a system keyring.","Secure credential storage in containerized or headless systems where desktop keyring services are unavailable.","Protect plaintext passwords in configuration files by replacing them with keyring lookups.","Implement password management in cross-platform scripts that need consistent credential handling.","Archive encrypted credentials in version control or backups with protection against casual inspection."],"what_it_does":"keyrings.cryptfile provides an encrypted file-based keyring backend for the keyring package, designed for scenarios where the system's default keyring storage (like GNOME Keyring or KDE Wallet) is unavailable or unsuitable. It stores passwords in a portable .ini-format file secured with Argon2 key derivation and authenticated AES encryption (GCM by default), with support for CCM, EAX, and OCB schemes.\n\nThe package encrypts each password with a keyring master password, deriving an Argon2 hash that serves as the encryption key. Service and user identifiers are included as associated data in the authenticated encryption, preventing tampering. The resulting encrypted data, salt, nonce, and MAC are stored in a text file. Operations are intentionally slow (around 1 second per call) due to the Argon2 KDF, which raises the computational cost of brute-force attacks.","worth_installing":"Yes, with conditions. Install if you need portable encrypted password storage and can tolerate high build friction (C compiler, development headers) and the ~1 second delay per password operation. The MIT license and active maintenance are favorable. Skip if your system already has a working keyring service or if build dependencies are unavailable; the package is not suitable for high-frequency password access due to intentional KDF slowness."},"id":"keyrings-cryptfile","links":{"html":"https://skillfed.io/packages/keyrings-cryptfile","md":"https://skillfed.io/packages/keyrings-cryptfile.md","pypi":"https://pypi.org/project/keyrings-cryptfile/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2022-11-20","license_spdx":null,"license_treatment":"permissive","name":"keyrings.cryptfile","python_support":"supports_current","summary":"Encrypted file keyring backend"},"popularity":{"monthly_downloads":391796,"position":7012,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.3.9"}