Encrypted .noydb bundle export for noy-db — wraps writeNoydbBundle() with the RFC #249 canExportBundle authorization gate and ergonomic browser/node helpers. Sole member of the @noy-db/as-* encrypted tier — ciphertext in, ciphertext out.

TypeScript SDK for Vesant Compliance Platform - Geolocation, KYC, Risk Profiling, CipherText, and Compliance Orchestration

Ciphertext-only local relay for lockit end-to-end shares.

Share .env files securely with one command. Servers only ever hold ciphertext.

Deniable encryption. One ciphertext, two passwords, two completely different plaintexts.

Ciphertext Ecosystem models.

Local MCP server for a Thoute vault — pulls ciphertext over the Thoute API and decrypts client-side.

WebSocket→TCP bridge for slothfulchat-web: tunnels the browser wasm core's IMAP/SMTP (ciphertext only) and DNS. Optional chatmail-server allowlist and opt-in link-preview unfurl endpoint.

CDK Construct that creates an AWS Secret Manager Secret and sets the value from an encrypted Ciphertext.

End-to-end-encrypted secure channel for the proxy tunnel: a signed-ephemeral-ECDH handshake (Ed25519 identity pinned out-of-band via the QR fingerprint) + XChaCha20-Poly1305 framing, so a relay between agent and phone sees only ciphertext it cannot forge

@agentproto/rendezvous — an untrusted ciphertext splicer for E2E daemon pairing. A deliberately dumb WebSocket broker: it matches two sockets sharing a one-time token and pipes their bytes verbatim, learning only token, IPs, sizes, and timing — never plai

Pipe username,password into this module to generate ciphertext from plaintext or to compare ciphertext with plaintext

Core utilities for the Ciphertext Ecosystem.

Create encrypted PrivateNote links from the terminal. Plaintext is encrypted locally; only ciphertext reaches the server.

The ctxfile relay: an always-on MCP endpoint over an encrypted vault. Hosted it is Sync; self-hosted it is the Team/Enterprise hub. Stores ciphertext, serves the five ctxfile tools, issues grants, keeps an append-only audit log.

On-host OpenClaw connector for Paxter Connect E2E. Runs as a service on the user's own machine and speaks the OpenClaw operator protocol over localhost, so the paxter-gateway becomes a blind relay that only ever sees ciphertext. Install with `npx @usepaxt

Sovereign encrypted-brain crypto core for Nfinit Monkeys clans — client-held X25519 keys, AES-256-GCM envelope encryption, per-recipient DEK wrapping, human-escrow recovery. Node built-in 'crypto' only; zero third-party deps. The Jungle stores ciphertext

Zero-knowledge engine for p00f: client-side AES-GCM + HKDF crypto, Link build/parse, and a ciphertext-only protocol client. Web Crypto only, so it runs in browsers, Node 20+, and Cloudflare Workers (workerd).

Low level bindings for libsodium

This is the library used in dokojs to decrypt the ciphertext(private input/outputs) in dokojs. <b>Initial Implementation Reference:</b> https://github.com/AleoHQ/snarkVM/blob/testnet3/console/program/src/request/sign.rs