The sensitive parts live in the core.
Vault’s cryptography sits in its own Rust crate and uses established libraries for encryption and key derivation. The interface just asks the core to do specific, well-defined things.
Back to our tools
At Yntra / Programming language
Rust
Rust handles Vault’s encryption, keys and local files. We also plan to use it for Platform’s backend later on.
Part of our work
How we use it
File handling stays local.
The local core reads, writes and unlocks the vault. That keeps file handling and sensitive session state in one place instead of spread out across the interface.
Split into testable layers.
Vault is split into separate crypto, core and app layers, so each part can be tested on its own. Platform doesn’t use Rust yet, but we plan to build its backend in it.
Further reading
The official docs, if you want to dig deeper.