2.1.0270.0 MB
MIT
strict
core22
User-space AES-256-XTS encrypted containers with keyfiles and hidden volumes
A Linux alternative to VeraCrypt. Disclaimer: Independent open-source project,
not affiliated with or endorsed by IDRIX / Mounir Idrassi. Uses user-space
encrypted container vaults rather than kernel FUSE/dm-crypt drive mounts.
FEATURES (100% real cryptography, zero mock data):
• Encrypted Container Creator & Unlocker: creates binary .evv container files
with 64-byte CSPRNG salt, PBKDF2-HMAC-SHA512 key derivation + optional
keyfile(s) mixing, and 512-bit AES-256-XTS encrypting 4096-byte sectors
(uint64 sector tweak). Includes Header Backup/Restore and instant Change
Password (re-encrypts master key slot without re-encrypting payload data).
• In-Container Encrypted Virtual Filesystem: once unlocked in memory, browse
an encrypted allocation table inside container sectors, add files, extract
decrypted files with SHA-256 verification, create folders, rename, delete
with random sector wipe, compact extents, and inspect the live sector map.
• Plausible-Deniability Hidden Volume Area & Security Self-Audit: optional
secondary hidden header at Sector 1 encrypting an isolated upper sector
range (honestly notes outer writes without mounting the hidden header can
overwrite upper sectors unless kept below the boundary), plus built-in
IEEE 1619 AES-256-XTS & NIST FIPS-197 live cipher self-verifier.
Support development: https://buymeacoffee.com/thanhnv128b
not affiliated with or endorsed by IDRIX / Mounir Idrassi. Uses user-space
encrypted container vaults rather than kernel FUSE/dm-crypt drive mounts.
FEATURES (100% real cryptography, zero mock data):
• Encrypted Container Creator & Unlocker: creates binary .evv container files
with 64-byte CSPRNG salt, PBKDF2-HMAC-SHA512 key derivation + optional
keyfile(s) mixing, and 512-bit AES-256-XTS encrypting 4096-byte sectors
(uint64 sector tweak). Includes Header Backup/Restore and instant Change
Password (re-encrypts master key slot without re-encrypting payload data).
• In-Container Encrypted Virtual Filesystem: once unlocked in memory, browse
an encrypted allocation table inside container sectors, add files, extract
decrypted files with SHA-256 verification, create folders, rename, delete
with random sector wipe, compact extents, and inspect the live sector map.
• Plausible-Deniability Hidden Volume Area & Security Self-Audit: optional
secondary hidden header at Sector 1 encrypting an isolated upper sector
range (honestly notes outer writes without mounting the hidden header can
overwrite upper sectors unless kept below the boundary), plus built-in
IEEE 1619 AES-256-XTS & NIST FIPS-197 live cipher self-verifier.
Support development: https://buymeacoffee.com/thanhnv128b
Update History
2.0.0 (1) → 2.1.0 (2)14 Nov 2026, 10:45 UTC
2.0.0 (1)13 Nov 2026, 02:30 UTC
13 Nov 2026, 01:59 UTC
14 Nov 2026, 10:31 UTC
13 Nov 2026, 02:30 UTC


