Click the Castor logo or press Ctrl Alt T to change theme.
# Documentation These pages are written as recipes and design notes for web developers. Read them in the order that matches what you are building. Begin with [Getting started](getting-started.html) if you are still choosing a primitive. It explains the difference between secrecy, authenticity, integrity, and password resistance. Read [Secrets and text boundaries](secrets.html) once. It explains the value objects that appear everywhere else: `Secret` for sensitive bytes and `SecretText` for cryptographic bytes that need encoding. Then choose a recipe: - [Password hashing](password-hashing.html) for account passwords. - [Symmetric encryption](symmetric-encryption.html) for database fields and application-owned secrets. - [Signed data](signed-data.html) for links, webhooks, manifests, and queue messages. - [Public-key encryption](key-pairs.html) for confidential messages between independently managed systems. - [Generic hashing](generic-hashing.html) for fingerprints, cache keys, and integrity checks. The practical details section covers [Base64 and hex](base64-and-hex.html) and [Error handling](error-handling.html). Those pages are intentionally short; the deeper security discussion lives in the recipes where the tradeoffs have context.
Castor ecosystem