// ENCRYPTED VAULT
The vault you actually control.
Local-first AES-256-GCM encryption with post-quantum recovery keys. Files mounted as a drive. No cloud. No telemetry. Your data never leaves your machine.
// THE CRYPTO STACK
Five layers. Standard primitives.
No invented crypto. Every layer is a widely-deployed primitive — and we publish the vault format spec.
Password → key Argon2id (256 MB · 3 iter · 4 threads)
Master key AES-256-GCM (envelope, hybrid PQ)
File content AES-256-GCM (chunked, per-file unique keys)
Directory metadata AES-256-GCM (filenames, sizes, timestamps)
Recovery ML-KEM-768 (post-quantum, Kyber)
Your vault. Your machine.
Download for Windows, macOS, or Linux. Local-first. No account required.
Download Cypherrum