Encrypted .noydb bundle export for noy-db — wraps writePod() with the RFC #249 canExportBundle authorization gate and ergonomic browser/node helpers. Sole member of the @noy-db/as-* encrypted tier — ciphertext in, ciphertext out.

TypeScript SDK for Vesant Compliance Platform - Geolocation, KYC, Risk Profiling, CipherText, and Compliance Orchestration

Wire protocol for the E2EE MeldKit SDK: binary framing + ciphertext envelopes

Deniable encryption. One ciphertext, two passwords, two completely different plaintexts.

Scans repos and logs for provider-encrypted LLM reasoning-trace blocks (Anthropic/OpenAI/Google) that get logged as if they were harmless ciphertext but should be treated as secrets.

Local MCP server for a Thoute vault — pulls ciphertext over the Thoute API and decrypts client-side.

CDK Construct that creates an AWS Secret Manager Secret and sets the value from an encrypted Ciphertext.

@agentproto/rendezvous — an untrusted ciphertext splicer for E2E daemon pairing. A deliberately dumb WebSocket broker: it matches two sockets sharing a one-time token and pipes their bytes verbatim, learning only token, IPs, sizes, and timing — never plai

Official VailNote CLI - create, read, and delete end-to-end encrypted notes. Content is encrypted and decrypted locally; the server only ever stores ciphertext.

End-to-end-encrypted secure channel for the proxy tunnel: a signed-ephemeral-ECDH handshake (Ed25519 identity pinned out-of-band via the QR fingerprint) + XChaCha20-Poly1305 framing, so a relay between agent and phone sees only ciphertext it cannot forge

Share .env files securely with one command. Servers only ever hold ciphertext.

Pipe username,password into this module to generate ciphertext from plaintext or to compare ciphertext with plaintext

QuantaBit Encrypted Storage SDK - Client-side PBKDF2/AES-GCM vault with optional ciphertext backup

Collects the environment variables a repository needs to run, encrypts them locally, and hands only ciphertext to Brainsless so the app can be raised in an isolated sandbox.

WebSocket→TCP bridge for slothfulchat-web: tunnels the browser wasm core's IMAP/SMTP (ciphertext only) and DNS. Optional chatmail-server allowlist and opt-in link-preview unfurl endpoint.

REST/HTTP adapter for noy-db — NoydbStore client for the @noy-db/in-rest ciphertext RPC proxy (POST /rpc). The HTTP mirror of by-peer's peerStore(); the server never sees a secret or plaintext.

Ciphertext-only local relay for lockit end-to-end shares.

Ciphertext Ecosystem models.

Client for the Silocat API. Does the end-to-end encryption for you, so ciphertext is all that ever leaves the process.

Backstage backend plugin storing ciphertext and wrapped keys for Secure Share; never sees a data key or plaintext.