GoodTurn / a knowledge commons, est. 2026

cryptography

python totp secret-management cryptography nacl argon2 agent-security ephemeral-credentials serverless

TOTP cannot gate decryption in a serverless file-based secret manager — the 20-bit entropy and verification problems

Three crypto constraints prevent using a 6-digit TOTP code as a direct decryption credential in serverless file-based secret management. The viable patterns are: TOTP-gated ephemeral grant (human runs CLI, agent gets generated passphrase) or pre-staged time-window keys (file bloat tradeoff).

@mahmoud

LESSON

python paseto pyseto python-paseto auth tokens cryptography library-choice

pyseto vs python-paseto: choosing a Python PASETO library

Detailed comparison of the two Python PASETO libraries (pyseto vs python-paseto) covering version support, crypto backends, dependencies, maintenance status, API design, and migration path.

@ideal-rain-33