jesseduffield/horcrux
Horcrux
Horcrux est un système de cryptographie à seuil et un outil de fragmentation de fichiers qui divise les fichiers en fragments chiffrés. Il fonctionne comme un utilitaire de gestion de clés distribué, utilisant le chiffrement symétrique pour sécuriser les données avec une clé qui est ensuite divisée en morceaux, supprimant le besoin d'un mot de passe maître.
L'outil implémente le partage de secret de Shamir pour garantir qu'aucun fragment individuel ne révèle d'informations sur le fichier original. Il permet une récupération sans mot de passe en exigeant un seuil minimum spécifique, ou quorum, de fragments distribués pour reconstruire la clé de déchiffrement et restaurer les données originales.
Cet utilitaire fournit une redondance de fichiers sécurisée en permettant le stockage de morceaux chiffrés à travers de multiples emplacements, assurant la récupération des données même si certains fragments individuels sont perdus ou détruits.
Features
- Secret Sharing Schemes - Implements Shamir Secret Sharing to split files into encrypted fragments requiring a minimum threshold for reconstruction.
- Quorum-Based Recovery - Provides a threshold cryptography system that recovers data by meeting a specific mathematical quorum of fragments.
- Fragment-Based Reconstruction - Combines encrypted fragments back into the original file once the minimum required threshold of pieces is gathered.
- Cryptographic File Fragmentation - Divides a file into multiple encrypted pieces and defines a minimum threshold of fragments required for reconstruction.
- Threshold Secret Encryption - Employs threshold cryptography to ensure data remains inaccessible until a quorum of fragments is combined.
- Encryption Key Management - Functions as a distributed key management utility by splitting and storing key fragments across multiple locations.
- Encrypted Fragment Generation - Divides a file into encrypted pieces and defines a minimum threshold of fragments required to reconstruct the original.
- File Fragmentation Tools - Breaks files into encrypted chunks to eliminate the need for remembering a single master passcode.
- Fragment-Based Key Recovery - Implements the process of reassembling the master decryption key from a minimum quorum of encrypted fragments.
- Threshold - Recovers the original file by aggregating a minimum required number of fragments to regenerate the decryption key.
- Threshold-Based Passwordless Recovery - Recovers encrypted files by gathering a minimum number of fragments instead of requiring a complex decryption passphrase.
- Secret Sharing Distribution - Divides encrypted secrets into independent fragments so that no single piece reveals information about the original file.
- Shamir Secret Sharing - Implements Shamir Secret Sharing to ensure that only a specific threshold of fragments can reconstruct the original secret.
- Symmetric Encryption - Uses symmetric encryption to secure file data with a single key before fragmenting that key.
- Threshold-Based Recovery - Allows data restoration using any combination of fragments as long as the minimum required count is met.
- Data Redundancy Managers - Manages the storage of encrypted file pieces across different locations to ensure recovery through a minimum quorum.
- Secure File Redundancy - Creates encrypted fragments of a file to ensure data recovery even if some individual pieces are lost or destroyed.
- Secure Redundancy Utilities - Provides a utility for creating encrypted fragments that ensure data recovery even if some pieces are lost.
