Hey everyone,
I’ve been searching for a dedicated post-quantum cryptography (PQC) tool to secure my local files against “harvest now, decrypt later” attacks, but couldn’t find a standalone tool that fit my threat model. So, I built one from one scratch.
I’ll admit I am a bit of a security paranoiac, but two things constantly bother me:
Cloud Backups: I don't trust providers like Google Drive or Microsoft OneDrive with unencrypted data. I need my files locked down locally before they ever touch the cloud.
Platform Interception: When sharing sensitive files over platforms owned by tech giants (who actively fund massive quantum research labs), I want a guarantee that they can't just harvest the data and brute-force it later.
To solve this riddle, I built a zero-trust, local GUI vault. It combines standard symmetric ciphers (AES-256-GCM, XChaCha20-Poly, etc.) with quantum-safe KEM algorithms (Cypherpunk Max, X-wing). I also built in a duress password feature; if triggered, it permanently destroys the vault key. Many futuristic ideas are in my mind to add…which will depend on the need of End-users after all (Including myself haha!)
Dont say Veracrypt, Picocrypt..etc. They dont provide dedicated PQC.
Here is the repository: github.com/ABiswasDev/Ombracrypt
I would love to get some professional eyes on this architecture. Let me know your thoughts, how you would improve it, or how you would try to break it!