Secure Vault
AES-256-GCM encryption with Argon2id key derivation. Runs entirely in your browser — nothing is sent anywhere.
About this project
A compact authenticated-encryption tool with explicit security boundaries.
AES Secure Vault is a Python package, CLI, and browser UI for practicing defensive crypto API design. It produces self-contained JSON payloads using AES-256-GCM, Argon2id, random salt and nonce values, and AAD-bound envelope metadata.
Built by Meidie Fei as part of a cybersecurity portfolio focused on small, reviewable tools with explicit security boundaries.
ProtectsConfidentiality at rest, ciphertext tampering detection, metadata tampering detection, and KDF downgrade resistance.
InteropBrowser encrypted blobs are compatible with the Python CLI and library, so the same payload format can be reviewed both ways.
LimitsPassphrase strength, memory scraping, side channels, and key rotation remain outside the tool boundary.
Verify the published package before installing
Release 1.1.1 adds a fail-closed check for GitHub asset digests, the SHA-256 manifest, tag-bound provenance, and GitHub attestations. Review release assets.
python tools/verify_published_release.py --tag v1.1.1