DEV Community

Mefisto
Mefisto

Posted on

DIEGOX: Combining Post-Quantum Cryptography with Plausible Deniability in Rust

#rust #opensource #showdev #cryptography

Hey DEV community 👋

Post-quantum cryptography is getting a lot of attention, but protecting files against future quantum computers solves only half the problem: what happens if someone forces you to hand over your password?

To address both threats, I built DIEGOX—an open-source desktop application written in Rust.

🎭 The Core Feature: Dual-KEM Plausible Deniability (Decoy Mechanism)

Most encryption tools only offer "all or nothing" protection. DIEGOX introduces a Dual-KEM Chameleon architecture that creates a single encrypted file containing two independent slots:

  1. 🔑 Alpha Passphrase: Unlocks your actual sensitive files (Real Slot).
  2. 🎭 Beta Passphrase: Unlocks harmless dummy files (Decoy Slot).

If you are ever forced to reveal your password under coercion, you can provide the Beta Passphrase. The attacker receives valid, uncorrupted decoy files, and it is mathematically impossible for them to prove that a second secret payload even exists inside the container.

🛡️ Technical Highlights

  • Post-Quantum Security: Built on Learning With Errors (LWE) lattice cryptography ($n=1024, q=12289$).
  • Argon2id Hardening: Resistant against GPU and ASIC parallelized brute-force attacks.
  • Cyberpunk GUI: Custom native interface built with egui / eframe in pure Rust.

📦 Try it out & Source Code

The project is licensed under Apache 2.0 and has automated CI builds for Windows, Linux, and macOS.

💬 Feedback Welcome

Since DIEGOX is in pre-release (v0.1.1), I would really appreciate feedback from Rust developers and security enthusiasts on the codebase, UI feel, or cryptographic architecture!

Top comments (0)