DEV Community

Abhishek Biswas
Abhishek Biswas

Posted on Originally published at ombracrypt.hashnode.dev

I couldn’t find a local Post-Quantum file encryption tool, so I built my own. Looking for feedback. Any thought on this ?

Hey everyone,

I’ve been searching for a dedicated post-quantum cryptography (PQC) tool to secure my local files against "harvest now, decrypt later" attacks, but couldn’t find a standalone tool that fit my threat model. So, I built one from one scratch.

I’ll admit I am a bit of a security paranoiac, but two things constantly bother me:

Cloud Backups:: I don't trust providers like Google Drive or Microsoft OneDrive with unencrypted data. I need my files locked down locally before they ever touch the cloud.

Platform Interception: When sharing sensitive files over platforms owned by tech giants (who actively fund massive quantum research labs), I want a guarantee that they can't just harvest the data and brute-force it later.

To solve this riddle, I built a zero-trust, local GUI vault. It combines standard symmetric ciphers (AES-256-GCM, XChaCha20-Poly, etc.) with quantum-safe KEM algorithms (Cypherpunk Max, X-wing). I also built in a duress password feature; if triggered, it permanently destroys the vault key. Many futuristic ideas are in my mind to add...which will depend on the need of End-users after all (Including myself haha!)

Dont say Veracrypt, Picocrypt..etc. They dont provide dedicated PQC. I built after getting tired by searching throughout the internet.

Here is the repository: github.com/ABiswasDev/Ombracrypt

I would love to get some professional eyes on this architecture. Let me know your thoughts, how you would improve it, or how you would try to break it!

Top comments (0)