Secret Value Manager in Go

This article details a secret value manager implemented in Go, covering three core components: passphrase management using PBKDF2 with SHA-256 and 100,000 iterations, secret encryption via AES-GCM with per-encryption random salts and IVs, and secret decryption. The passphrase is never stored directly; instead a derived key and salt are stored, and verification re-derives the key with the same salt for comparison.