w3mypq

w3mypq

توسط

w3mypq provides a privacy-focused file encryption and sharing tool for WordPress. Files are encrypted in the user’s browser before upload using ML-KEM and AES-GCM.

The plugin combines modern cryptographic standards with low-level binary packing, thread isolation, and forensic memory management. Its low-overhead, browser-based w3Gemini engine supports secure and fast post-quantum file sharing between users.

What you must know: This plugin aims to be a high-security tool that guarantees absolute data sovereignty by design. To achieve this, the plugin utilizes state-of-the-art post-quantum cryptography. It is engineered so that even if the service provider’s servers are compromised, attackers only find useless, encrypted data because nobody else possesses the users’ private decryption keys. This architecture offers the highest level of security, assuming the integrity of the core cryptographic code. The deployment must remain free from modifications that compromise private keys or exploit payload structures via unauthorized public key injection and user impersonation.

Features

  • Implements ML-KEM 1024 for post-quantum key encapsulation.
  • Supports ML-DSA 87 signatures for sender verification.
  • Utilizes AES-GCM-256 for symmetric file encryption.
  • Leverages SHA-512 for cryptographic integrity verification.
  • Encrypts files locally in the browser before upload (Zero-Knowledge).
  • Supports sharing files with one or more recipients.
  • Displays the user’s daily upload quota and the remaining time until it resets.
  • Recipients decrypt files locally using their own private keys.
  • Guest mode for local-only encryption and decryption.
  • Designed around NIST post-quantum cryptography standards.

Admin Options

  • Maximum attachment file sizes configuration.
  • Daily user storage upload quota limits.
  • User role permissions access level controls.
  • Dynamic encrypted file retention storage periods.
  • Maximum unique recipients allowed per file.
  • The Vault Module Maintenance feature provides easy options to execute targeted administrative cleanup routines on the server or for testing purposes.

Manage all configuration panels by navigating to: WP Admin -> Settings -> w3mypq.

Help and Documentation

  1. Upload the plugin folder to the /wp-content/plugins/ directory, or install it through the WordPress Plugins screen.
  2. Activate the plugin through the Plugins menu in WordPress.
  3. Add the shortcode [w3mypq_short] to a page or post.
  4. Open the page and use the interface to generate keys, encrypt files, and share them with recipients.

Customization

To preserve customizations during updates:

  1. Copy the w3mypq-custom folder from the plugin directory into /wp-content/plugins/.
  2. Edit:
  • w3mypq.css
  • w3mypq_body.html
    1. The plugin automatically loads these files when present.
    2. If the custom files are not found, the default plugin files are used.

سوالات متداول

Client-Side Limitations & Server Capacity

The size of the files that can be encrypted depends entirely on the processor power and RAM of the device running the browser. Remember, all file encryption and decryption happen directly client-side within the browser. Furthermore, while you can easily encrypt files to create a 500MB or even 1GB payload, you must also account for connection speeds and the server’s capacity to handle uploading or downloading such large amounts of data.

What does this plugin do?

The plugin allows users to encrypt files locally in their browser before sharing or storing them.

It supports post-quantum key encapsulation using ML-KEM and digital signatures using ML-DSA. Encrypted files can be shared with recipients who decrypt them locally using their own private keys.

Share files with multiple recipients

Registered users can encrypt files for one or more recipients. Recipients receive access information and can decrypt the files locally using their corresponding Private keys once downloaded.

Does the server store my private keys?

No.

Private keys are generated locally in the user’s browser and should be stored securely by the user.

The server only stores information necessary for sharing encrypted content, such as public keys and encrypted files.

What are ML-KEM, ML-DSA, and AES-GCM?

ML-KEM and ML-DSA are NIST-standardized post-quantum cryptographic algorithms. ML-KEM handles secure key exchange, and ML-DSA provides digital signatures and sender verification.

AES-GCM is the symmetric encryption algorithm used to encrypt and decrypt the bulk file data itself, ensuring high-speed authenticated encryption.

What is guest mode?

Guest mode allows visitors to perform encryption and decryption locally without creating an account.

Files do not need to be uploaded to the server when using guest mode.

How is the Noble library used?

The plugin includes a compiled version of the Noble post-quantum cryptography library for ML-KEM and ML-DSA.

The plugin’s /noble directory contains additional information about the library and its build process.

تصویری برای این آیتم موجود نیست.
نظری برای این آیتم موجود نیست.
0 0 رای ها
امتیازدهی
اشتراک در
اطلاع از
0 نظرات
قدیمی‌ترین
تازه‌ترین بیشترین رأی
بازخورد (Feedback) های اینلاین
مشاهده همه دیدگاه ها
هیچ نسخه‌ای برای این آیتم موجود نیست.
بدون امتیاز

قیمت:

رایگان

نگارش

آخرین انتشار

21 خرداد 1405

آخرین بروزرسانی

4 روز پیش

نصب های فعال

-

نگارش وردپرس

وردپرس 6.2+

تست شده از نسخه

وردپرس 7.0

نگارش PHP

PHP 7.4+

نسخه ها

0 نسخه