A small, standalone end-to-end-encryption library in Rust, compiled to WebAssembly so any web application can encrypt user content client-side without trusting the server. In roughly 2,300 lines it composes established, widely-reviewed open primitives - XChaCha20-Poly1305-IETF authenticated encryption, Argon2id password-based key derivation, HKDF-SHA256, X25519 key agreement and sealed boxes, Ed25519 signatures, and BIP-39 recovery phrases - drawn from the RustCrypto, dalek-cryptography and rust-bitcoin projects. It implements no primitives of its own; its contribution is correct composition, a misuse-resistant API, versioned ciphertext envelopes, memory zeroization, and a single Rust implementation shared by server and browser. Published under Apache-2.0 with continuous integration and public test vectors. The library is code-complete and pre-launch; an independent cryptographic audit and a WASM/JS-boundary application-security review are the funded goals, with the reports to be published in full.
Fund this project