ChaPose is a professional-grade command-line tool designed for high-performance offline file security. Built on the ChaCha20-Poly1305 AEAD algorithm, it provides robust encryption and decryption capabilities while maintaining exceptional performance, making it ideal for automation and secure workflows.
Key Features:
High-Performance Encryption: Leverages the ChaCha20-Poly1305 standard for fast, reliable encryption, especially suited for large datasets.
Pure Streaming Architecture: Optimized for minimal memory usage and seamless handling of massive data streams.
Automation Support: Integrates with CI/CD pipelines via environment variables, enabling secure file operations in automated workflows.
Cross-Platform Compatibility: Works on multiple operating systems, ensuring flexibility and consistency across different environments.
Integration Capabilities: Seamlessly works with tools like ft:filetools for advanced security audit chains.
Audience & Benefit:
Ideal for developers, DevOps professionals, and experts who require reliable encryption in their workflows. ChaPose streamlines secure file operations without compromising performance or security, making it a valuable tool for automating sensitive tasks in high-stakes environments. It can be installed via winget for easy setup.
README
ChaCrypt - Modern High-Performance Offline File Security Ecosystem
ChaCrypt is an "Offline-First" file security ecosystem designed to protect your data sovereignty. In an era where the Internet is an "insecure highway" filled with surveillance, interception, and leaks, ChaCrypt provides a local fortification to secure your sensitive information before it ever leaves your machine.
🛡 Why ChaCrypt? The Philosophy
"Offline-First, Data Sovereignty" is not just a slogan; it is a defense line built against the biggest security risks in modern data flow:
Online Transmission Security: Sensitive data must be reinforced locally before entering insecure channels such as instant messaging, cloud drives, or email. Ensuring that data is encrypted before it leaves your device is the only way to prevent eavesdropping, interception, and leaks at the source.
Offline Storage Security: Provides "cold protection" for sensitive assets on local disks, NAS, or mobile media. In cases of physical device loss or unauthorized access, the ChaCha20-Poly1305 standard ensures that data sovereignty is never violated.
ChaCrypt operates on a Zero-Trust Local principle:
Local Security Reinforcement: Adheres to the "Fortify First, Transfer Later" rule; security does not rely on the promises of third-party providers.
Memory-Level Processing: We avoid writing temporary plaintext files to disk. Decryption, previewing, and editing happen in RAM whenever possible to prevent physical data fragments.
Transparency & Auditability: Using a "Stacked Extension" strategy (e.g., .tgz.cha), you can instantly see the exact processing chain (Archived -> Compressed -> Encrypted).
⚡ The Standard: ChaCha20-Poly1305 (AEAD)
We exclusively use the ChaCha20-Poly1305 standard for all operations. Why?
Extreme Performance: Compared to AES, it has an overwhelming advantage in software implementation, especially on mobile devices and for massive data (GB/TB scale) transfers.
Physical-Grade Integrity: As an AEAD algorithm, it provides a tamper-proof signature for every offline asset. If a file loses a single bit on disk due to hardware failure or malicious modification, decryption fails immediately, ensuring the reliability of stored data.
Modern Industry Standard: Adopted by Google and the Linux kernel, it is the modern foundation for high-performance security.
🛠 The Ecosystem
ChaCrypt provides two specialized tools to serve every type of user, from personal privacy seekers to DevOps professionals.
Target: Ordinary users and Power users.
ChaBox is a visual workstation for those who prefer an intuitive, "one-click" experience.
Five Atomic Tools: Integrated Batch Archive, Batch Unarchive, Batch Encrypt, Batch Decrypt, and Digital Shredder for the full data lifecycle.
Secure Notes (One of the Core Capabilities): Built on immersive Markdown writing and real-time preview, ChaBox further supports variable-based references and encrypted embedded images (local and remote HTTP sources), combining smooth note-taking with unified encrypted protection for both note text and attached images while reducing migration friction across devices.
Active Defense: Integrated App Lock, Idle Lock, Anti-Screenshot, Full-Platform Anti-Recording, and Screen Masking for privacy.
Physical Destruction: Built-in industrial-grade file wiping to destroy original sensitive data.
If you find this tool helpful and would like to see it continue to improve and evolve, please consider showing your support.
⭐ Star the Repo: This is a great encouragement. Your stars help more people discover this tool and gain more recognition in the community.
☕ Support the Developer (Global): Any contribution, however small, is a huge affirmation of my work. You can support via GitHub Sponsors or Buy Me a Coffee.
🐼 Support via Ifdian (Mainland China): Users in China can also show support via Ifdian.
Thank you for your support, which is a vital boost that keeps me focused on the project's continuous iteration; because of you, more people can benefit from this tool much sooner.
⚖️ License & Philosophy
Build for Yourself, Encourage Contribution: We support forks and customization for unique workflows, and highly encourage developers to contribute features of general value back to the main repository.