# Security Features **Mercury** is designed with security in mind from the beginning. - First, we will be using [Orion](https://lib.rs/crates/orion) - a pure **Rust** crypto library. - There is built in support for checksums and **AES** encryption in the [filesystem](/development/design/filesystem.md). - **HMAC**[^hmac] will be used for message passing - which additionally allows for encrypted messages. - [nanorand](https://lib.rs/crates/nanorand) RNG - [HighwayHash](https://lib.rs/crates/highway) is used for checksums - [Argon2id](https://lib.rs/crates/argon2) is used for key-derivation ## Isolation *To-Do* [^hmac]: https://cryptobook.nakov.com/mac-and-key-derivation