你的秘密， 只属于你

// Vault unlock flow (simplified) func unlock(password: String) { // 1. PBKDF2 key derivation let derivedKey = pbkdf2( password, salt, iterations: 100_000 ) // 2. Decrypt dataEncryptKey let dek = aesDecrypt( encryptedDEK, key: derivedKey ) // 3. Open SQLCipher Vault vault.open(key: dek) // ✓ Master password never stored // ✓ DEK lives in memory only }