TLDR Tech / InfoSec
LUKSbox (GitHub Repo)
LUKSbox is an Apache-2.0 Rust tool from Penthertz that creates encrypted .lbx vaults for storing sensitive files on untrusted storage like cloud sync, NAS, or USB, with the Master Volume Key wrapped via passphrase, FIDO2 hmac-secret, TPM 2.0, or ML-KEM-768/1024 hybrid post-quantum keyslots. The pre-1.0 release pairs AES-GCM-SIV / AES-GCM / ChaCha20-Poly1305 AEAD chunks with HMAC-SHA256 header auth, a rollback-detection anchor sidecar, and memfd_secret(2) to keep unlocked keys out of coredumps, accessible via CLI, TUI, or egui GUI across Linux/macOS/Windows. A third-party audit is still pending despite 10 libFuzzer harnesses, 30M+ iterations, and 9 internal audit rounds.
Read the full story