{"repo":"FileShot/FileShotZKE","free":true,"listed":false,"github":"https://github.com/FileShot/FileShotZKE","clone":"git clone https://github.com/FileShot/FileShotZKE.git","description":"Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.","language":"HTML","stars":30,"topics":["aes-256","aes-256-gcm","browser-encryption","client-side-encryption","encryption","file-sharing","file-transfer","javascript","privacy","web-crypto-api"],"license":"MIT","category":"security-tools","readme_excerpt":"# FileShot Zero-Knowledge Encryption Client-side, open-source zero-knowledge encryption used by FileShot.io. All encryption happens in the browser via the Web Crypto API. The server receives only ciphertext — it never sees the key, the password, or the plaintext file. --- How the Zero-Knowledge Model Works FileShot uses two modes of zero-knowledge encryption, both implemented in this library: URL-Fragment Mode (production default) 1. A cryptographically random 256-bit key is generated in the browser. 2. The file is encrypted with AES-256-GCM using that key. 3. Only the ciphertext is uploaded to the server. 4. The key is placed in the URL fragment ( #key=... ) of the share link. 5. The URL fragment is never transmitted to the server — browsers do not include fragments in HTTP requests by design. 6. The recipient decrypts entirely in-browser using the key from the URL. The server is architecturally incapable of decrypting the file even under compulsion. Password Mode Users may optionally set a password. The key is derived from the password via Argon2id (memory: 64 MB, iterations: 2, parallelism: 1) — a memory-hard KDF that resists GPU and ASIC brute-force attacks. The password itself is never transmitted. The recipient enters the password in their browser to decrypt. Files encrypted before this migration used PBKDF2-SHA256 (100,000 iterations) and are still fully decryptable — the format version byte in the binary header selects the correct KDF automatically. --- Security Detai","default_branch":null,"files":null,"tree":[],"storefront":"/r/FileShot","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/FileShot/FileShotZKE/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}