MeshVault
Decentralized Encrypted
Storage Platform
A production-grade encrypted storage platform with envelope encryption, automatic P2P chunk replication, and cryptographic key isolation. Your files, your network, your control.
What is MeshVault?
MeshVault is a decentralized encrypted storage platform that combines a high-performance Python systems daemon with a secure C# WPF desktop launcher. By distributing encrypted file chunks across a peer-to-peer mesh of your own trusted devices, MeshVault eliminates third-party cloud vulnerabilities and gives you absolute control over your data.
Files are processed through an envelope encryption architecture: each file receives a unique File Encryption Key (FEK) encrypted with AES-GCM, while key exchange uses X25519 Diffie-Hellman and manifests are signed with Ed25519. The encrypted payload splits into verifiable, independently recoverable chunks that replicate across your network.
MeshVault supports password-protected file sharing, recipient-based secure sharing with revocation, automatic self-healing redundancy, secure audit logging, and full V1-to-V2 envelope encryption migration. Actively developed and production-hardened.
Verified & Released
✅ Released All features below are implemented, tested, and available in the current build.
Encryption & Cryptography
- ✅ End-to-End Encryption
- ✅ Envelope Encryption (V2)
- ✅ AES-GCM Encryption
- ✅ Per-file Encryption Keys (FEK)
- ✅ X25519 Secure Key Exchange
- ✅ Ed25519 Manifest Signing
Secure Sharing & Access
- ✅ Password Protected File Sharing
- ✅ Recipient-based Secure Sharing
- ✅ Recipient Revocation
- ✅ Password Rotation
- ✅ FEK Rotation
- ✅ Secure Audit Logging
Distributed Mesh Network
- ✅ Automatic Chunk Replication
- ✅ Distributed Chunk Storage
- ✅ Self-Healing Redundancy
- ✅ Multi-node Desktop Support
Platform & Migration
- ✅ Windows Desktop Application
- ✅ Installer Package
- ✅ Portable Distribution
- ✅ Legacy V1 Compatibility
- ✅ V1 → V2 Migration
Currently Under Active Development
🚧 In Development These features are actively being implemented and tested.
Technical Highlights
Core engineering capabilities powering MeshVault.
Envelope Encryption Architecture
Distributed P2P Storage
Automatic Redundancy
Self-Healing Recovery
Secure Manifest Signatures
Password & Recipient Sharing
Cryptographic Key Isolation
Background Verification
Streaming File Processing
Secure Audit Trails
How MeshVault Works
High-level data flow from your desktop to the secure mesh network.
Security Deep Dive
Security isn't a feature of MeshVault — it's the foundation. All listed protections are implemented and verified.
AES-GCM Encryption
Authenticated encryption providing both confidentiality and tamper detection for all stored data.
Envelope Encryption
Each file is encrypted with a unique FEK, which is then wrapped under a master key for cryptographic isolation.
X25519 Key Exchange
Elliptic curve Diffie-Hellman key agreement for secure sharing without exposing private keys.
Ed25519 Signatures
Manifest signing and integrity verification using Edwards-curve digital signature algorithm.
Secure Password Protection
Password-derived access with key stretching for file sharing without pre-exchanging keys.
Integrity Verification
Cryptographic integrity checks on all chunks ensure tampered data is detected and rejected.
Manifest Signing
Ed25519-signed manifests guarantee file metadata authenticity and prevent unauthorized modification.
Audit Logging
Secure logging of all access, sharing, revocation, and key rotation events for forensic accountability.
Performance Focus
Current development priorities for production-grade performance. Benchmark numbers will be published after official measurement.
Constant Memory Processing
Stream-based file handling designed to maintain bounded memory usage regardless of file size.
Streaming Transfers
Pipeline-based upload and download processing to minimize latency and memory footprint.
Improved Scalability
Architecture optimizations for larger file counts, more peers, and higher concurrent operations.
Better Fault Tolerance
Graceful degradation, automatic recovery, and production-grade error handling across all subsystems.
Enterprise-grade Diagnostics
Background integrity verification, distributed transaction correlation, and performance telemetry.
Product Roadmap
✅ Complete 🚧 In Progress 📋 Planned
Secure Storage
Distributed Replication
Envelope Encryption
Large File Streaming
Microsoft Store Release
Cross-platform Clients
Cloud Discovery Network
Development Timeline
Core Storage Engine
Foundational chunk-based encrypted storage system with local persistence and retrieval.
Secure Chunk Encryption
AES-GCM encryption pipeline with PBKDF2 key derivation and integrity verification.
Distributed Replication
P2P chunk distribution across trusted mesh nodes with automatic peer discovery.
Envelope Encryption
V2 envelope encryption architecture with per-file FEK, X25519 key exchange, and Ed25519 signing.
Multi-node Sharing
Password-protected and recipient-based file sharing with revocation and key rotation.
Production Validation
Security audit, manifest signing, NTFS protections, and fail-closed middleware hardening.
Large File Streaming
Constant-memory streaming transfers, adaptive chunk retrieval, and production fault recovery.
Microsoft Store Preparation
Store compliance packaging, automated update delivery, and expanded platform support.
Engineering Statistics
Release Information
See MeshVault In Action
Interface design preview of the MeshVault desktop application.
Mesh Network Status
✓ ConnectedActive Peers
4 Connected
Mesh Storage
128.5 GB Allocated
Verification Status
100% Audited
Recent File Transfers
| File Name | Size | Replication | Status |
|---|---|---|---|
| Project_Arch_Core.pkg | 45.2 MB | 3/3 Nodes | ✓ Sync Complete |
| Hagaratagi_Branding.zip | 12.8 MB | 4/4 Nodes | ✓ Sync Complete |
Application Screenshots
Production screenshots of the MeshVault desktop application will be published here after production stabilization. The interface preview above represents the current design direction.
Distribution Package
Download, verify, and install MeshVault. Includes both installer and portable distribution.
SHA-256 Integrity Verification
Verify the authenticity of your download using this SHA-256 checksum hash. This checksum is automatically generated by the build process.
3d67da8bf5a7e7a77c3c42d327aa2bb2316629674d683f97ad3b2a54d26e1ce5
Verification Command
Open Windows PowerShell in your downloads folder and run:
Build Metadata
Frequently Asked Questions
Deploy MeshVault
Secure, distributed local storage. Designed by Hagaratagi Technologies.