Zero-Knowledge Post-Quantum File Platforms - Sell Project

Premium Bundle Sale: Mak & Fylex – Two Elite, Production-Grade Secure File Sharing PlatformsExclusive bundle offering the complete, unrestricted source code and exhaustive documentation for two masterfully engineered, production-ready secure file platforms developed in Go. These are sophisticated, single-binary deployable systems incorporating state-of-the-art post-quantum cryptography, zero-trust/zero-knowledge architectures, and exhaustive threat mitigations. Ideal for entrepreneurs, cybersecurity firms, or developers building privacy-preserving SaaS, decentralized storage solutions, or monetized content platforms.This bundle delivers exceptional value: two complementary, high-complexity projects with overlapping tech stacks but distinct strengths - Maks forensic-grade zero-trust for sensitive communications and Fylex decentralized monetization for creators. Every feature is listed in full detail below for complete transparency.Mak Platform – Zero-Trust Hybrid Post-Quantum Server with Forensic Hardening & Censorship ResistanceMak employs a "Blind Server" architecture where the server is cryptographically barred from accessing plaintext data, usernames, or social graphs.Comprehensive Security & Cryptography Features:- Hybrid Encryption: Composite key derivation from Kyber-1024 (ML-KEM) and X25519 (ECDH), encrypted with AES-256-GCM.- Zero-Trust Context Binding (AAD): Keys bound to metadata (e.g., OwnerID|ExpirationTime); tampering causes mathematical decryption failure.- Secure Key Persistence: Private keys exported as Argon2id-encrypted (Time=4, 64MB) JSON blobs.- Traffic Analysis Resistance: All encrypted blobs padded to 4KB boundaries with random noise.- Entropy Verification: WASM core validates browser RNG to prevent weak keys.- Memory Hygiene: Explicit zeroization of sensitive material via runtime.KeepAlive.- Timing Attack Mitigation: Constant-time dummy verifications for invalid users.- Client-Side XSS Prevention: Strict MIME-Type whitelist; dangerous types forced to binary download.- Supply Chain Transparency: WASM SHA-256 hash pinned to Hedera Hashgraph for tamper-proof delivery.- DOM Integrity ("Immune System"): MutationObserver triggers panic mode and key wipe on unauthorized changes.Authentication & Access Control Features:- Metadata Obfuscation: Stores SHA256(Bob_PubKey) instead of sharing graphs.- Identity Blinding: Usernames HMAC-SHA256 hashed with server-side pepper.- Anti-Enumeration (Decoy System): Deterministic fake keys/success for non-existent users.- Log Privacy: Sensitive lookups via POST with encrypted bodies.- Zero-Trust Expiration: Cryptographic (baked into GCM tag) + Drand Network time verification.- Comprehensive DoS Protection: Exponential PoW, rate-limiting, Hedera caps, transaction limits.- Session Management: Stateless JWT with blacklist revocation.- Ghost Share Prevention: Recipient public key validation.- Key Transparency: Merkle Tree snapshots pinned to Hedera.- Hidden Vaults (Duress): Decoy vault unlocked by duress password.Secure Storage & Search Features:- Blind Search (SSE): Exact-match on encrypted data with deterministic padding and shuffling noise.- Semantic Search (Fuzzy): MinHash signatures for privacy-preserving similarity.- IPFS Integration: Encrypted blobs stored on IPFS; blind server-side streaming hides CIDs.- Zero-Trust Sharing: Client-side proxy re-encryption with timed access.- MIME-Type Sniffing: Magic bytes validation against malicious uploads.- Stealth Drop (Dead Drops): Anonymous uploads to public keys with ephemeral keys and C2PA.- Deferred "Double-Lock" Auto-Sharing: Russian Doll encryption with Drand TimeLock layer.- Polyglot Camouflage: Payloads embedded in valid JPEGs for DPI resistance.- Crypto-Shredding: Key deletion renders IPFS data unrecoverable.Advanced Integrations & Forensics:- Verifiable Credentials: W3C JSON-LD signed with Dilithium.- Attribute Verification (ZKP): Groth16 circuits with Merkle Trees.- Time-Lock Encryption: Drand for dead-man switches.- Deepfake Protection: Signed C2PA manifests.- Audit Logging: Immutable Hedera Hashgraph trail.- Forensic Watermarking: LSB steganography + dynamic obfuscated append.- Adversarial Image Cloaking (Nightshade): Client-side poisoning against AI scraping.- Forensic File Sanitization: EXIF/XMP scrub + blue-channel filter for yellow dots.Infrastructure & UI Features:- Anti-Spectre/Meltdown: COOP/COEP headers for WASM isolation.- Single-Binary Deployment: Go embed for all assets.- Glassmorphism UI: TailwindCSS v4, mobile-first, custom secure modals.- Aggressive No Caching: No-Cache on critical assets.- Decoy Traffic: Random chaff to defeat timing analysis.- Content Security Policy: Strict nonce-based CSP.Fylex – Decentralized Zero-Knowledge Encrypted File Sharing with Solana MonetizationFylex acts as a zero-knowledge facilitator- never seeing passwords, final keys, or file locations (encrypted CIDs stored).Security & Privacy Features:- Hybrid Post-Quantum Cryptography: ML-KEM-768 (Kyber) + P-256 ECDH.- Defense-in-Depth Storage: Client-side encryption + 3-pass server temp overwrite.- Client-Side CID Encryption: Database stores encrypted IPFS CIDs only.- Zero-Knowledge Architecture: No server knowledge of passwords/keys.- End-to-End Encryption: AES-256-GCM per-file.- Tamper-Proof Integrity: Client SHA-256 hashes verified on download.Access Control & Usability Features:- Cryptographic Time-Locks: Drand beacon enforces future release.- Burn After Reading: Atomic transaction locking for download limits.- Smart Folder Support: In-memory parallel WASM ZIP64 compression.- Resumable Chunked Uploads: For large/multi-GB files.- Smart Cleanup: Paginated expiration unpinning from IPFS.- Smart Compression & Deduplication: Client-side duplicate detection and text compression.Monetization & Decentralization Features:- Pay-to-Unlock: SolanaPay transactions.- Robust Payout Queue: Encrypted, idempotent queue for reliability.- Encrypted Financial Data: Wallet/transaction encryption.Advanced Threat Mitigation Features:- Smart File Cleaning: 3-pass overwrite before removal.- Atomic Database Locking: Serialized SQL for burn limits.- Constant-Time Verification: subtle.ConstantTimeCompare.- Strict Subresource Integrity (SRI): Hashed third-party scripts.- Randomized File Size Padding: Defeats fingerprinting.- Aggressive In-Memory Key Zeroing: .fill(0) on all material.- Client-Side Proof-of-Work: Lightweight mandatory PoW.- Ephemeral Single-Use API Routes: Tokenized endpoints.- End-to-End Integrity: Chunk hashing with bundled keys.- Adaptive DDoS Resistance: Dynamic PoW escalation via Redis.- Idempotent Blockchain Payouts: On-chain verification.Bundle Inclusions:- Full source code for both projects.- Complete Markdown documentation (features, security architecture, WASM APIs, setup).- Build scripts,. env templates, schemas, and installation guides.Reason for Selling: Transitioning to new projects, passing these elite assets to the next owner.This bundle represents rare, expert-level privacy engineering ready for immediate deployment or commercialization. Serious buyers only.