Occlude - Zero-Knowledge Platform
Open-source zero-knowledge encryption platform with a Rust + WebAssembly crypto engine. XChaCha20-Poly1305 encryption and Argon2id key derivation — the server never sees plaintext.
Overview
An open-source zero-knowledge platform where encryption and decryption happen entirely on the client. The core is a Rust-based WebAssembly crypto engine that performs XChaCha20-Poly1305 authenticated encryption with Argon2id memory-hard key derivation from user passwords. The server stores only ciphertext and nonces — no keys or plaintext ever leave the browser. The first application is an end-to-end encrypted notes app built with SvelteKit. A TypeScript client SDK wraps the WASM engine, abstracting all cryptographic complexity behind a simple encrypt/decrypt API. The architecture follows the same zero-knowledge principles used by Proton, Standard Notes, and Bitwarden — built from scratch as both a production tool and an open learning project.