Zero-Knowledge Post-Quantum File Platforms - Sell Project

Premium Bundle Sale: Mak & Fylex – Two Elite, Production-Grade Secure File Sharing Platforms Exclusive bundle offering the complete, unrestricted source code and exhaustive documentation for two masterfully engineered, production-ready secure file platforms developed in Go. These are sophisticated, single-binary deployable systems incorporating state-of-the-art post-quantum cryptography, zero-trust/zero-knowledge architectures, and exhaustive threat mitigations. Ideal for entrepreneurs, cybersecurity firms, or developers building privacy-preserving SaaS, decentralized storage solutions, or monetized content platforms. This bundle delivers exceptional value: two complementary, high-complexity projects with overlapping tech stacks but distinct strengths - Maks forensic-grade zero-trust for sensitive communications and Fylex decentralized monetization for creators. Every feature is listed in full detail below for complete transparency. Mak Platform – Zero-Trust Hybrid Post-Quantum Server with Forensic Hardening & Censorship Resistance Mak employs a "Blind Server" architecture where the server is cryptographically barred from accessing plaintext data, usernames, or social graphs. Comprehensive Security & Cryptography Features: Hybrid Encryption: Composite key derivation from Kyber-1024 (ML-KEM) and X25519 (ECDH), encrypted with AES-256-GCM. Zero-Trust Context Binding (AAD): Keys bound to metadata (e.g., OwnerID|ExpirationTime); tampering causes mathematical decryption failure. Secure Key Persistence: Private keys exported as Argon2id-encrypted (Time=4, 64MB) JSON blobs. Traffic Analysis Resistance: All encrypted blobs padded to 4KB boundaries with random noise. Entropy Verification: WASM core validates browser RNG to prevent weak keys. Memory Hygiene: Explicit zeroization of sensitive material via runtime.KeepAlive. Timing Attack Mitigation: Constant-time dummy verifications for invalid users. Client-Side XSS Prevention: Strict MIME-Type whitelist; dangerous types forced to binary download. Supply Chain Transparency: WASM SHA-256 hash pinned to Hedera Hashgraph for tamper-proof delivery. DOM Integrity ("Immune System"): MutationObserver triggers panic mode and key wipe on unauthorized changes. Authentication & Access Control Features: Metadata Obfuscation: Stores SHA256(BobPubKey) instead of sharing graphs. Identity Blinding: Usernames HMAC-SHA256 hashed with server-side pepper. Anti-Enumeration (Decoy System): Deterministic fake keys/success for non-existent users. Log Privacy: Sensitive lookups via POST with encrypted bodies. Zero-Trust Expiration: Cryptographic (baked into GCM tag) + Drand Network time verification. Comprehensive DoS Protection: Exponential PoW, rate-limiting, Hedera caps, transaction limits. Session Management: Stateless JWT with blacklist revocation. Ghost Share Prevention: Recipient public key validation. Key Transparency: Merkle Tree snapshots pinned to Hedera. Hidden Vaults (Duress): Decoy vault unlocked by duress password. Secure Storage & Search Features: Blind Search (SSE): Exact-match on encrypted data with deterministic padding and shuffling noise. Semantic Search (Fuzzy): MinHash signatures for privacy-preserving similarity. IPFS Integration: Encrypted blobs stored on IPFS; blind server-side streaming hides CIDs. Zero-Trust Sharing: Client-side proxy re-encryption with timed access. MIME-Type Sniffing: Magic bytes validation against malicious uploads. Stealth Drop (Dead Drops): Anonymous uploads to public keys with ephemeral keys and C2PA. Deferred "Double-Lock" Auto-Sharing: Russian Doll encryption with Drand TimeLock layer. Polyglot Camouflage: Payloads embedded in valid JPEGs for DPI resistance. Crypto-Shredding: Key deletion renders IPFS data unrecoverable. Advanced Integrations & Forensics: Verifiable Credentials: W3C JSON-LD signed with Dilithium. Attribute Verification (ZKP): Groth16 circuits with Merkle Trees. Time-Lock Encryption: Drand for dead-man switches. Deepfake Protection: Signed C2PA manifests. Audit Logging: Immutable Hedera Hashgraph trail. Forensic Watermarking: LSB steganography + dynamic obfuscated append. Adversarial Image Cloaking (Nightshade): Client-side poisoning against AI scraping. Forensic File Sanitization: EXIF/XMP scrub + blue-channel filter for yellow dots. Infrastructure & UI Features: Anti-Spectre/Meltdown: COOP/COEP headers for WASM isolation. Single-Binary Deployment: Go embed for all assets. Glassmorphism UI: TailwindCSS v4, mobile-first, custom secure modals. Aggressive No Caching: No-Cache on critical assets. Decoy Traffic: Random chaff to defeat timing analysis. Content Security Policy: Strict nonce-based CSP. Fylex – Decentralized Zero-Knowledge Encrypted File Sharing with Solana Monetization Fylex acts as a zero-knowledge facilitator- never seeing passwords, final keys, or file locations (encrypted CIDs stored). Security & Privacy Features: Hybrid Post-Quantum Cryptography: ML-KEM-768 (Kyber) + P-256 ECDH. Defense-in-Depth Storage: Clien...