Checked 2026-08-13. Pins finalized in Cargo.lock / project files during implementation.
| Crate | Version | Necessity |
|---|---|---|
argon2 |
0.5.3 | Argon2id |
aes-gcm |
0.11.0 | AES-256-GCM |
hkdf |
0.12.x | HKDF-SHA256 for recovery KEK |
sha2 |
0.10.x | SHA-256 for HKDF |
getrandom |
0.4.3 | OS CSPRNG |
rand_core |
0.10.1 | RNG traits |
rand |
0.9.x | Password generation |
zeroize |
1.9.0 | Wipe |
secrecy |
0.10.3 | Secret wrappers |
subtle |
2.x | Constant-time |
thiserror |
2.x | Errors |
uuid |
1.x | IDs |
crc32fast |
1.x | Structural CRC |
fs4 |
0.13.x | Advisory exclusive file lock |
Dev: proptest, tempfile, cargo-audit.
| Package | Version |
|---|---|
| TFM | net8.0-windows |
| CommunityToolkit.Mvvm | 8.4.2 |
| Microsoft.Extensions.DependencyInjection | 8.0.x |
| Microsoft.Extensions.Logging.Abstractions | 8.0.x |
| ExcelDataReader (+ DataSet) | 3.9.0 |
Encrypted workbook support: Phase 7 spike only.