<Project Sdk="Microsoft.NET.Sdk">

  <!--
    The DSH1 envelope format, AAD derivation, key wrapping and the KDF.
    Referenced by both the API and the client, but the server only ever uses the format
    and fingerprint constants: it never holds a key and never decrypts a payload.
    See docs/crypto.md, which is the normative specification for everything here.
  -->

  <PropertyGroup>
    <IsTrimmable>true</IsTrimmable>
    <IsAotCompatible>true</IsAotCompatible>
  </PropertyGroup>

  <ItemGroup>
    <PackageReference Include="NSec.Cryptography" />
  </ItemGroup>

  <ItemGroup>
    <InternalsVisibleTo Include="DodoSSH.Crypto.Tests" />
  </ItemGroup>

</Project>
