4 ms·
Maker here — adding a concrete detail to make critique easier. Capsule = one file: header (version, KDF/AEAD ids) + encrypted payload chunks + policy tree (AND
by dkatsura 7mo ago
Maker here — adding a concrete detail to make critique easier.
Capsule = one file: header (version, KDF/AEAD ids) + encrypted payload chunks + policy tree (AND/OR over time/geo/password/visual). Password path uses Argon2id; payload encryption is AEAD (AES-GCM or ChaCha20-Poly1305).
If you were reviewing this: what would you want first — (a) public capsule format spec, (b) test vectors for decrypt/verify, or (c) a short threat-model page with explicit non-goals?