From ac5b030f71434123bea60f9b1d918a59f19fed6a Mon Sep 17 00:00:00 2001
From: Levi Durfee <levi.durfee@gmail.com>
Date: Wed, 7 Jan 2026 11:35:07 -0500
Subject: Switch to argon2

---
 internal/encrypt.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'internal/encrypt.go')

diff --git a/internal/encrypt.go b/internal/encrypt.go
index 204c6f2..3ee73d7 100644
--- a/internal/encrypt.go
+++ b/internal/encrypt.go
@@ -1,7 +1,7 @@
 package internal
 
 func Encrypt(data []byte) (EncryptedDataPayload, error) {
-	kek, err := NewKEKFromEnvB64("GOAES_PASSPHRASE", "GOAES_SALT")
+	kek, salt, err := NewKEKFromEnvB64("GOAES_PASSPHRASE")
 	if err != nil {
 		return EncryptedDataPayload{}, err
 	}
@@ -23,6 +23,7 @@ func Encrypt(data []byte) (EncryptedDataPayload, error) {
 
 	return EncryptedDataPayload{
 		DEK:     edek,
+		Salt:    salt,
 		Payload: ct,
 	}, nil
 }
-- 
cgit v1.2.3