jesseduffield/horcrux
Horcrux
Horcrux is a threshold cryptography system and file fragmentation tool that splits files into encrypted fragments. It functions as a distributed key management utility, using symmetric encryption to secure data with a key that is then divided into pieces, removing the need for a master passcode.
The tool implements Shamir Secret Sharing to ensure that no single fragment reveals information about the original file. It allows for passwordless recovery by requiring a specific minimum threshold, or quorum, of distributed fragments to reconstruct the decryption key and restore the original data.
This utility provides secure file redundancy by enabling the storage of encrypted pieces across multiple locations, ensuring data recovery even if some individual fragments are lost or destroyed.
Features
- Secret Sharing Schemes - Implements Shamir Secret Sharing to split files into encrypted fragments requiring a minimum threshold for reconstruction.
- Quorum-Based Recovery - Provides a threshold cryptography system that recovers data by meeting a specific mathematical quorum of fragments.
- Fragment-Based Reconstruction - Combines encrypted fragments back into the original file once the minimum required threshold of pieces is gathered.
- Cryptographic File Fragmentation - Divides a file into multiple encrypted pieces and defines a minimum threshold of fragments required for reconstruction.
- Threshold Secret Encryption - Employs threshold cryptography to ensure data remains inaccessible until a quorum of fragments is combined.
- Encryption Key Management - Functions as a distributed key management utility by splitting and storing key fragments across multiple locations.
- Encrypted Fragment Generation - Divides a file into encrypted pieces and defines a minimum threshold of fragments required to reconstruct the original.
- File Fragmentation Tools - Breaks files into encrypted chunks to eliminate the need for remembering a single master passcode.
- Fragment-Based Key Recovery - Implements the process of reassembling the master decryption key from a minimum quorum of encrypted fragments.
- Threshold - Recovers the original file by aggregating a minimum required number of fragments to regenerate the decryption key.
- Threshold-Based Passwordless Recovery - Recovers encrypted files by gathering a minimum number of fragments instead of requiring a complex decryption passphrase.
- Secret Sharing Distribution - Divides encrypted secrets into independent fragments so that no single piece reveals information about the original file.
- Shamir Secret Sharing - Implements Shamir Secret Sharing to ensure that only a specific threshold of fragments can reconstruct the original secret.
- Symmetric Encryption - Uses symmetric encryption to secure file data with a single key before fragmenting that key.
- Threshold-Based Recovery - Allows data restoration using any combination of fragments as long as the minimum required count is met.
- Data Redundancy Managers - Manages the storage of encrypted file pieces across different locations to ensure recovery through a minimum quorum.
- Secure File Redundancy - Creates encrypted fragments of a file to ensure data recovery even if some individual pieces are lost or destroyed.
- Secure Redundancy Utilities - Provides a utility for creating encrypted fragments that ensure data recovery even if some pieces are lost.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
