Security Spec

Cryptographic Specification

  • File Key Wrapping: filippo.io/age multi-recipient header stanzas.
  • Identity Isolation: Dedicated ~/.muth/identity prevents key domain confusion with standard SSH authentication keys.
  • Secret Masking: muth get masks values (DB_PASS=sup...23) unless explicit --reveal flag is passed.
← PREVIOUS LESSON 5-Minute Quickstart NEXT LESSON → CLI Command Reference