Cryptographically hardened credential management, authenticated file encryption, and streaming HMAC integrity. Designed as a local-security portfolio project; this public sandbox is educational only.
CryptoVault.exe → Properties → check ☑️ Unblock → OK (or click More info → Run anyway).
Designed to withstand GPU brute-force clusters, offline SQLite tampering, and memory side-channels.
Configured with 64 MiB of memory, 3 iterations, and 4 threads to make password cracking economically unfeasible for GPU rigs and ASICs.
Length-prefixed binary Authenticated Associated Data binds usernames directly to the ciphertext tag, preventing record splicing attacks.
Zero telemetry or cloud syncing. Data remains strictly on your local disk with atomic ACID rollback transactions.
Authenticates files of any size in streaming 64 KiB chunks. Verifies manifests using constant-time equality checks to eliminate timing side-channel exploits.
hmac.compare_digest()
Run real WebCrypto operations locally in your browser. Test key derivation, encryption, and simulate bit-flip tamper detection.
⚠️ Educational browser sandbox: do not enter real passwords, API keys, or production secrets.