Designed a custom 45-byte NP binary vault format with PBKDF2-SHA512 (1M iterations), AES-256-GCM, HMAC-SHA256 integrity checks, DEFLATE compression, and client-side verification ciphers the server never sees plaintext keys or passwords.
02 / Case StudyPGP Cryptography
NEXT PGP
A zero-knowledge PGP Progressive Web App for key generation, keyring management, and end-to-end encrypted cloud vaults all in the browser.
Role
Solo product design, zero-knowledge architecture, full stack engineering, PWA
Timeline
2024 - Present
Stack
Next.js / Auth.js / Hero UI / OpenPGP
Project Context
Built ToFeel Useful.
Next PGP is a full-featured cryptographic workstation delivered as a PWA. Users generate keys across modern algorithms (Curve25519, NIST, Brainpool, RSA), manage keyrings locally in IndexedDB, encrypt and decrypt messages, files, and recursive folders including batch operations, and optionally sync encrypted backups through a zero-knowledge cloud vault. Every cryptographic operation runs client-side via OpenPGP.js and the Web Crypto API, vault passwords are never sent to the server, and a dynamic Web Worker pool scales heavy workloads across all CPU cores without blocking the UI.
Architecture
Zero-Knowledge
Performance
Multi-Core
Surface
PWA
Technical System
Sharp stack. Clear product shape.
Next.jsAuth.jsHero UITailwind CSSOpenPGP.jsWeb Crypto APIIndexedDBPrismaPostgreSQLPWAWeb WorkersPBKDF2AES-256-GCMArgon2TypeScript
Built a secure backend with probabilistic rate limiting, HMAC-signed CSRF tokens, server-side cipher validation, and a dual keyserver proxy with automated failover.
Shipped a cross-platform PWA with OAuth (Google, GitHub, Discord), app-password protection, HttpOnly JWT vault sessions, Argon2id OTP vault deletion, and encrypted cloud backup across desktop and mobile.
Visual Archive
Screens
07
NEXT-PGP / Frame 01
NEXT-PGP / Frame 02
NEXT-PGP / Frame 03
NEXT-PGP / Frame 04
NEXT-PGP / Frame 05
NEXT-PGP / Frame 06
NEXT-PGP / Frame 07
Next Step