{"id":9846,"date":"2026-02-14T19:24:27","date_gmt":"2026-02-14T18:24:27","guid":{"rendered":"https:\/\/www.axew3.com\/w3\/?page_id=9846"},"modified":"2026-03-05T10:50:12","modified_gmt":"2026-03-05T09:50:12","slug":"unicorn-w3mypgp-secure-binary-vault-encrypt-decrypt","status":"publish","type":"page","link":"https:\/\/www.axew3.com\/w3\/unicorn-w3mypgp-secure-binary-vault-encrypt-decrypt\/","title":{"rendered":"Unicorn w3mypgp &#8211; Secure Binary Vault &#8211; encrypt decrypt"},"content":{"rendered":"\n<p class=\"has-large-font-size wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\"><strong>Note that GEMINI has been released!<\/strong><\/mark><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hybrid vs. Pure Asymmetric<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Unicorn (v6):<\/strong> It mainly used pure RSA for encryption. RSA can only encrypt small amounts of data due to its key size.<\/li>\n\n\n\n<li><strong>Gemini (v7):<\/strong> RSA-OAEP is used to encrypt a randomly generated AES-256 session key. This combines the secure key exchange of RSA with the speed of AES for the file content.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-axew-3-com wp-block-embed-axew-3-com\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"eLmp9idde4\"><a href=\"https:\/\/www.axew3.com\/w3\/gemini-w3mypgp-js-rsa-oaep-aes-gcm-hybrid-encryption\/\">Gemini w3mypgp | JS RSA-OAEP &amp; AES-GCM Hybrid Encryption<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Gemini w3mypgp | JS RSA-OAEP &amp; AES-GCM Hybrid Encryption&#8221; &#8212; axew3.com\" src=\"https:\/\/www.axew3.com\/w3\/gemini-w3mypgp-js-rsa-oaep-aes-gcm-hybrid-encryption\/embed\/#?secret=tA6892Bhy1#?secret=eLmp9idde4\" data-secret=\"eLmp9idde4\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<div style=\"height:38px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">&#x1f984; w3mypgp v6 <strong>UNICORN<\/strong>:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li> The &#8220;Ghost&#8221; Architecture (Private IIFE)<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>The Feature:<\/strong> The entire engine is wrapped in an <em>Immediately Invoked Function Expression<\/em>.<\/li>\n\n\n\n<li><strong>The Security:<\/strong> Variables like <code>password<\/code>, <code>fileBuffers<\/code>, and <code>keys<\/code> are invisible to the browser&#8217;s developer console (F12). While the script runs in a secure browser stack, a compromised device could still monitor screen activity. If you suspect that your device is infected, then it is recommended never copying your password or private key to the clipboard; keep it within the app&#8217;s secure session for maximum protection.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.  <\/strong>700,000-Round Hardening (PBKDF2-HMAC-SHA512)<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>The Feature:<\/strong> Key derivation uses <strong>700k iterations<\/strong> with a <strong>512-bit hash<\/strong>.<\/li>\n\n\n\n<li><strong>The Security:<\/strong> This exceeds 2026 industry standards (600k). This creates a mathematical &#8220;time-lock&#8221; that protects your data against GPU and ASIC brute-force attacks. When combined with a long, strong password, your archive becomes virtually impossible to crack\u2014now and in the future.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. Background Thread Isolation (Web Workers)<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>The Feature:<\/strong> Heavy binary packing and AES-GCM math are offloaded to an <strong>Inline Blob Worker<\/strong>.<\/li>\n\n\n\n<li><strong>The Security:<\/strong> This separates the &#8220;sensitive work&#8221; from the UI thread. It prevents &#8220;UI Freezing&#8221; and ensures the [Preloader] continues to spin, while isolating the cryptographic process in its own memory space.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4. Zero-Copy Memory Management (Transferables)<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>The Feature:<\/strong> Uses <strong>Transferable Objects<\/strong> to &#8220;hand over&#8221; 500MB+ buffers between threads.<\/li>\n\n\n\n<li><strong>The Security:<\/strong> Unlike standard <code>postMessage<\/code> which copies data, this <strong>moves<\/strong> it. Once transferred, the data is physically deleted from the original thread&#8217;s RAM, leaving no &#8220;ghost&#8221; copies for memory scrapers.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Three-Minute Shredder<\/strong> ( still not added on first 6.0 UNICORN )<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><s>5. The &#8220;Three-Minute Shredder&#8221; (Auto-Self-Destruct)<\/s><\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><s><strong>The Feature:<\/strong> A background inactivity timer resets the app after 180 seconds.<\/s><\/li>\n\n\n\n<li><s><strong>The Security:<\/strong> It kills the Worker, revokes Blob URLs, and wipes all UI fields. This protects the data if a user walks away from their device without closing the tab.<\/s><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6. Custom Binary Packing (Authenticated Archive)<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>The Feature:<\/strong> A custom &#8220;Tarball&#8221; header <code>[Count][Timestamp][NameLen][Name][Size][Data]<\/code> inside <strong>AES-GCM<\/strong>.<\/li>\n\n\n\n<li><strong>The Security:<\/strong> Filenames and dates are encrypted <em>within<\/em> the binary blob. AES-GCM (Galois\/Counter Mode) provides <strong>AEAD<\/strong>, meaning if even one bit of the file archive is altered, decryption will fail (Integrity Protection).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7. Forensic Memory Wiping<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>The Feature:<\/strong> Immediate variable nulling and <code>input.value<\/code> clearing after every operation.<\/li>\n\n\n\n<li><strong>The Security:<\/strong> Minimizes the &#8220;RAM footprint.&#8221; The plain-text password and file data exist in memory for the absolute minimum time required to process them.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8. Physical &#8220;Key File&#8221; Support<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>The Feature:<\/strong> Direct password loading from <code>.txt<\/code> or <code>.key<\/code> files.<\/li>\n\n\n\n<li><strong>The Security:<\/strong> Bypasses the <strong>System Clipboard<\/strong> and <strong>Keyboard loggers<\/strong>, preventing other smartphone apps from &#8220;sniffing&#8221; the password during input.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>V6 Status:<\/strong> &#x1f6e1;&#xfe0f; <strong>9.9\/10 Security<\/strong><br><strong>License:<\/strong> &#x1f4c4; <strong>GPLv3 (Open Source &amp; Auditable)<\/strong><\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">try it &#8211; online <a href=\"https:\/\/www.axew3.com\/www\/deApps\/w3mypgp\/w3mypgp.html\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>encrypt decrypt files using w3mypgp.html<\/strong><\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To &#8220;wrestle the world from fools,&#8221; you need an unbreakable foundation. This engine uses a Hybrid Cryptosystem designed to stand for years:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>AES-256-GCM (Symmetric):<\/strong> The Gold Standard for file encryption. With <strong>256-bit security<\/strong>, your content is protected by the same level used for &#8220;Top Secret&#8221; communications.<\/li>\n\n\n\n<li><strong>RSA-OAEP (Asymmetric):<\/strong> A mathematically superior method for key exchange. OAEP is resistant to modern padding attacks, ensuring your keys remain strictly yours.<\/li>\n\n\n\n<li><strong>Integrity Verified:<\/strong> Using GCM mode means every bit is tamper-proof. If anyone touches your data, the engine knows.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In a world of centralized servers, <strong>Unicorn w3mypgp<\/strong> is a Zero-Knowledge fortress.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Local Execution:<\/strong> Everything happens in your <strong>browser stack<\/strong>.<\/li>\n\n\n\n<li><strong>Zero-Trust:<\/strong> Your private keys and files <strong>never leave your system<\/strong>.<\/li>\n\n\n\n<li><strong>Future-Proof:<\/strong> Built on <a href=\"https:\/\/www.w3.org\/TR\/webcrypto-2\/\" target=\"_blank\" rel=\"noreferrer noopener\">native Web Crypto APIs<\/a>, this engine is ready for the browsers of tomorrow.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"has-xx-large-font-size wp-block-paragraph\"><a href=\"https:\/\/www.axew3.com\/w3\/forums\/viewtopic.php?t=2149\"><strong>Download the last w3mypgp<\/strong><\/a><\/p>\n\n\n\n<p class=\"has-xx-large-font-size wp-block-paragraph\"><strong>How to<\/strong> here:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-axew-3-com wp-block-embed-axew-3-com\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"89xBCYZPF9\"><a href=\"https:\/\/www.axew3.com\/w3\/2025\/11\/super-secret-storage-of-network-files-and-messages\/\">Secret encrypted storage of network files and messages<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Secret encrypted storage of network files and messages&#8221; &#8212; axew3.com\" src=\"https:\/\/www.axew3.com\/w3\/2025\/11\/super-secret-storage-of-network-files-and-messages\/embed\/#?secret=gIKWm4Ck7e#?secret=89xBCYZPF9\" data-secret=\"89xBCYZPF9\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Note that GEMINI has been released! Hybrid vs. Pure Asymmetric &#x1f984; w3mypgp v6 UNICORN: 2. 700,000-Round Hardening (PBKDF2-HMAC-SHA512) 3. Background Thread Isolation (Web Workers) 4. Zero-Copy Memory Management (Transferables) Three-Minute Shredder ( still not added on first 6.0 UNICORN ) 5. The &#8220;Three-Minute Shredder&#8221; (Auto-Self-Destruct) 6. Custom Binary Packing (Authenticated Archive) 7. Forensic Memory Wiping [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-9846","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages\/9846","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/comments?post=9846"}],"version-history":[{"count":3,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages\/9846\/revisions"}],"predecessor-version":[{"id":10021,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages\/9846\/revisions\/10021"}],"wp:attachment":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/media?parent=9846"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}