# Security & Cryptography Specification

- **Master Key Derivation**: Argon2id (Memory: 64MB, Iterations: 3, Parallelism: 4).
- **Platform KeyStore Integration**:
  - Windows: DPAPI / Credential Manager
  - Linux: Freedesktop SecretService API
  - Android: Hardware-backed Android KeyStore / TEE
- **Database Cipher**: SQLCipher 4.x (AES-256-CBC with HMAC-SHA512).
- **Transport Security**: Noise XK protocol handshake over QUIC/UDP.