The Problem Space
Commercial cloud storage providers retain custody of user keys or rely on cumbersome PGP tooling that creates severe friction for everyday file sharing, leaving assets exposed to platform breaches and unauthorized access.
Back to all projects
KryptVault
Your files. Your boundaries.
Zero-knowledge encrypted storage platform utilizing XChaCha20-Poly1305 AEAD and fine-grained access policies.
CipherXChaCha20-Poly1305
Desktop RuntimeTauri + Rust
ProtocolZero-Knowledge
The Architecture & System
Engineered a cross-platform desktop application and high-performance backend where files are encrypted client-side before touching the network. Employs libsodium key wrapping and authenticated AEAD encryption for zero-knowledge guarantees.
Cross-platform desktop client built with Tauri and Rust, wrapping native libsodium cryptographic primitives. The backend is built on Hono and PostgreSQL for metadata indexing, paired with an S3-compatible encrypted blob storage pipeline.
Key Technical Decisions
- Adopted XChaCha20-Poly1305 for its extended 192-bit nonce, eliminating nonce-collision risks in distributed clients.
- Used Tauri instead of Electron to minimize desktop memory footprint by 85% and execute crypto routines directly in compiled Rust.
- Decoupled metadata storage from ciphertext chunk streaming to preserve zero-knowledge boundary proofs.