ProcPass, My Own Password Manager

Today I implemented the core security model using envelope encryption. The master password never touches vault data. Instead, it derives a Key Encryption Key (KEK) that wraps the Vault Encryption Key (VEK, the actual key protecting your data).

The payoff is that changing master password is instant. Since the VEK stays the same, you only re-wrap 32 bytes with a new KEK. No re-encryption of the entire vault, even with thousands of entries.

I also started using AI for making better diagrams for the devlogs (they are way more beautiful than my handmade thinking LoL).
Special thanks for @lacorte that gived that idea for me ;)