End-to-end encrypted file sharing with a user-selectable cipher suite per send. You pick where on the spectrum you want to be — classical, hybrid post-quantum, pure post-quantum, or CNSA 2.0 — and the app dispatches accordingly.
Available envelope primitives:
- Key exchange: X25519, secp384r1, X25519+ML-KEM-768 (hybrid), ML-KEM-768, ML-KEM-1024
- Signatures: Ed25519, ECDSA-P384, Ed25519+ML-DSA-65 (dual hybrid), ML-DSA-65, ML-DSA-87
- Hash & HKDF: SHA-256, SHA-384, SHA-512, SHA3-512
- Symmetric: AES-128-GCM, AES-256-GCM
- Password KDF: Argon2id
Implemented in the browser via @noble/curves, @noble/post-quantum, @noble/hashes, and the WebCrypto API. Files are encrypted in your browser; the server never sees plaintext or your private keys.