The author is developing a local file storage system based on gocryptfs, prioritizing security as the primary function rather than just a feature. The project aims to create a storage solution that behaves like hardware-protected media, filling the gap between standard file storage and specialized security devices.
The threat model assumes the storage device could be seized by an attacker. To mitigate this, the system uses a two-factor authentication approach: a physical key and a master password. The key is encrypted with the password, ensuring that the loss of the key alone does not compromise the data.
A critical component of the design is a Dead Man's Switch mechanism. This feature is intended to automatically lock or wipe the storage if the device is seized while already unlocked or if the owner is forced to provide access. The implementation of this trigger remains a key development task.
In a separate development, a new study demonstrated that classical computing power can reduce the security level of RSA encryption to an insufficient threshold. Researchers successfully compromised legacy 1024-bit keys using an academic processor cluster over the course of several months.
