A small, standalone end-to-end-encryption library in Rust, compiled to WebAssembly so any web application can encrypt user content client-side without trusting the server. In roughly 2,300 lines it composes established, widely-reviewed open primitives - XChaCha20-Poly1305-IETF authenticated encryption, Argon2id password-based key derivation, HKDF-SHA256, X25519 key agreement and sealed boxes, Ed25519 signatures, and BIP-39 recovery phrases - drawn from the RustCrypto, dalek-cryptography and rust-bitcoin projects. It implements no primitives of its own; its contribution is correct composition, a misuse-resistant API, versioned ciphertext envelopes, memory zeroization, and a single Rust implementation shared by server and browser. Published under Apache-2.0 with continuous integration and public test vectors. The library is code-complete and pre-launch; an independent cryptographic audit and a WASM/JS-boundary application-security review are the funded goals, with the reports to be published in full.

Fund this project

Unverified URL

The funding manifest has not provided proof via wellKnown that this link is associated with it. Learn more.

Continue