Skip to content

ClatsGuard-Heavy

Choose a tag to compare

@Clats97 Clats97 released this 20 Sep 22:49
· 4 commits to main since this release
dde1320

CHANGELOG

This release is a major step forward in protecting your most important files FOR FREE!!! No paying for AxCrypt, no logins, no fuss. Just a simple to use, sophisticated executable file. Python file will be released by 2025-09-29.

-MASSIVE INCREASE IN SUPPORTED FILE EXTENSIONS!!: ClatsGuard Heavy now supports an additional 49 file extensions, namely: '.xltm', '.xltx', '.dll', '.bat', '.exe', '.tif', '.tiff', '.bmp', '.gif', '.png', '.jpg', '.jpeg', '.mkv', '.wmv', '.avi', '.mp4', '.mp3', '.wav', '.wma', '.csv', '.zip', '.rar', '.7z', '.sys', '.ini', '.log', '.js', '.html', '.htm', '.css', '.iso', '.json', '.epub', '.psd', '.ai', '.svg', '.ico', '.tar', '.gz', '.vhd', '.vhdx', '.msi', '.reg', '.lnk'

  • Hybrid Encryption Scheme: Implements a robust hybrid cascade encryption system using ChaCha20-Poly1305 + AES-GCM-SIV + HMAC-SHA512, combined with advanced key derivation via Argon2id or scrypt, and metadata embedding for enhanced security via a defense-in-depth approach.
  • Streamed File Processing: Processes files in chunks for memory-efficient handling of large files, with atomic writes to ensure safety against interruptions and avoid partial files.
  • Security Enhancements: Includes memory zeroing to prevent leaks, constant-time comparisons, misuse-resistant modes, integrity checks, key stretching, AEAD modes, HKDF for subkeys, and stronger KDFs (Argon2id preferred over PBKDF2) tuned to be memory-hard against brute-force attacks.
  • Cancellation and Input Management: Adds support for operation cancellation, input validation, automatic clipboard clearing, and post-operation clearing of sensitive inputs like passphrases or hex keys.
  • UI Improvements: Features a more polished user interface with options such as deleting originals, restricting file types, a progress bar, toggles for showing/hiding passphrases/hex keys, random key generation, and various key modes.
  • Expanded File Support: Broadens compatibility to include more extensions, such as media files (.mp4, .jpg).
  • Modular Architecture: Highly modular design with added security-focused utilities and modules, including JSON for metadata, struct for binary packing, HMAC-SHA-512 for integrity, constants for chunking and versioning, and stream methods for efficient operations.