Flagship Product

MeshVault
Decentralized Encrypted
Storage Platform

A production-grade encrypted storage platform with envelope encryption, automatic P2P chunk replication, and cryptographic key isolation. Your files, your network, your control.

◇ Overview

What is MeshVault?

MeshVault is a decentralized encrypted storage platform that combines a high-performance Python systems daemon with a secure C# WPF desktop launcher. By distributing encrypted file chunks across a peer-to-peer mesh of your own trusted devices, MeshVault eliminates third-party cloud vulnerabilities and gives you absolute control over your data.

Files are processed through an envelope encryption architecture: each file receives a unique File Encryption Key (FEK) encrypted with AES-GCM, while key exchange uses X25519 Diffie-Hellman and manifests are signed with Ed25519. The encrypted payload splits into verifiable, independently recoverable chunks that replicate across your network.

MeshVault supports password-protected file sharing, recipient-based secure sharing with revocation, automatic self-healing redundancy, secure audit logging, and full V1-to-V2 envelope encryption migration. Actively developed and production-hardened.

◇ Released Features

Verified & Released

✅ Released  All features below are implemented, tested, and available in the current build.

🔐

Encryption & Cryptography

  • End-to-End Encryption
  • Envelope Encryption (V2)
  • AES-GCM Encryption
  • Per-file Encryption Keys (FEK)
  • X25519 Secure Key Exchange
  • Ed25519 Manifest Signing
🔑

Secure Sharing & Access

  • Password Protected File Sharing
  • Recipient-based Secure Sharing
  • Recipient Revocation
  • Password Rotation
  • FEK Rotation
  • Secure Audit Logging
📡

Distributed Mesh Network

  • Automatic Chunk Replication
  • Distributed Chunk Storage
  • Self-Healing Redundancy
  • Multi-node Desktop Support
💻

Platform & Migration

  • Windows Desktop Application
  • Installer Package
  • Portable Distribution
  • Legacy V1 Compatibility
  • V1 → V2 Migration
◇ In Progress

Currently Under Active Development

🚧 In Development  These features are actively being implemented and tested.

🚧
Large File Streaming Retrieval
🚧
Constant Memory Reconstruction
🚧
Streaming Upload Pipeline
🚧
Adaptive Chunk Retrieval
🚧
Advanced Replica Verification
🚧
Manifest Consistency Verification
🚧
Background Integrity Diagnostics
🚧
Distributed Transaction Correlation
🚧
Per-file Concurrency Controls
🚧
Optimistic Manifest Versioning
🚧
Production-grade Fault Recovery
🚧
Retrieval Cancellation
🚧
Graceful Shutdown
🚧
Performance Telemetry
◇ Highlights

Technical Highlights

Core engineering capabilities powering MeshVault.

🔐

Envelope Encryption Architecture

📡

Distributed P2P Storage

🔄

Automatic Redundancy

💚

Self-Healing Recovery

🔏

Secure Manifest Signatures

🔑

Password & Recipient Sharing

🛡️

Cryptographic Key Isolation

🔍

Background Verification

Streaming File Processing

📋

Secure Audit Trails

◇ Architecture

How MeshVault Works

High-level data flow from your desktop to the secure mesh network.

◇ Security

Security Deep Dive

Security isn't a feature of MeshVault — it's the foundation. All listed protections are implemented and verified.

🔐

AES-GCM Encryption

Authenticated encryption providing both confidentiality and tamper detection for all stored data.

📦

Envelope Encryption

Each file is encrypted with a unique FEK, which is then wrapped under a master key for cryptographic isolation.

🔑

X25519 Key Exchange

Elliptic curve Diffie-Hellman key agreement for secure sharing without exposing private keys.

🔏

Ed25519 Signatures

Manifest signing and integrity verification using Edwards-curve digital signature algorithm.

🔒

Secure Password Protection

Password-derived access with key stretching for file sharing without pre-exchanging keys.

🧬

Integrity Verification

Cryptographic integrity checks on all chunks ensure tampered data is detected and rejected.

📝

Manifest Signing

Ed25519-signed manifests guarantee file metadata authenticity and prevent unauthorized modification.

📋

Audit Logging

Secure logging of all access, sharing, revocation, and key rotation events for forensic accountability.

◇ Performance

Performance Focus

Current development priorities for production-grade performance. Benchmark numbers will be published after official measurement.

🧠

Constant Memory Processing

Stream-based file handling designed to maintain bounded memory usage regardless of file size.

Streaming Transfers

Pipeline-based upload and download processing to minimize latency and memory footprint.

📈

Improved Scalability

Architecture optimizations for larger file counts, more peers, and higher concurrent operations.

🛡️

Better Fault Tolerance

Graceful degradation, automatic recovery, and production-grade error handling across all subsystems.

📊

Enterprise-grade Diagnostics

Background integrity verification, distributed transaction correlation, and performance telemetry.

◇ Roadmap

Product Roadmap

✅ Complete 🚧 In Progress 📋 Planned

Phase 1
✔️

Secure Storage

Complete
Phase 2
✔️

Distributed Replication

Complete
Phase 3
✔️

Envelope Encryption

Complete
Phase 4
🚧

Large File Streaming

In Progress
Phase 5
📋

Microsoft Store Release

Planned
Phase 6
📋

Cross-platform Clients

Planned
Phase 7
📋

Cloud Discovery Network

Planned
◇ Timeline

Development Timeline

✓ Complete

Core Storage Engine

Foundational chunk-based encrypted storage system with local persistence and retrieval.

✓ Complete

Secure Chunk Encryption

AES-GCM encryption pipeline with PBKDF2 key derivation and integrity verification.

✓ Complete

Distributed Replication

P2P chunk distribution across trusted mesh nodes with automatic peer discovery.

✓ Complete

Envelope Encryption

V2 envelope encryption architecture with per-file FEK, X25519 key exchange, and Ed25519 signing.

✓ Complete

Multi-node Sharing

Password-protected and recipient-based file sharing with revocation and key rotation.

✓ Complete

Production Validation

Security audit, manifest signing, NTFS protections, and fail-closed middleware hardening.

🚧 In Progress

Large File Streaming

Constant-memory streaming transfers, adaptive chunk retrieval, and production fault recovery.

📋 Planned

Microsoft Store Preparation

Store compliance packaging, automated update delivery, and expanded platform support.

◇ Engineering

Engineering Statistics

Production Release
Development Status
Windows Desktop
Platform
AES-GCM + X25519 + Ed25519
Encryption
Peer-to-Peer
Architecture
Python + C# (.NET)
Language
Installer + Portable
Deployment
Active Development
Status
◇ Release

Release Information

Current Status Production Release
Platform Windows Desktop (Win 10/11)
Current Version v1.1.0
Release Date June 29, 2026
Distribution Windows Installer (.exe)
License License information coming soon.
◇ Application Preview

See MeshVault In Action

Interface design preview of the MeshVault desktop application.

Application Screenshots

Production screenshots of the MeshVault desktop application will be published here after production stabilization. The interface preview above represents the current design direction.

◇ Download & Verification

Distribution Package

Download, verify, and install MeshVault. Includes both installer and portable distribution.

SHA-256 Integrity Verification

Verify the authenticity of your download using this SHA-256 checksum hash. This checksum is automatically generated by the build process.

MeshVault Setup Installer (MeshVault_Setup.exe) 3d67da8bf5a7e7a77c3c42d327aa2bb2316629674d683f97ad3b2a54d26e1ce5

Verification Command

Open Windows PowerShell in your downloads folder and run:

PowerShell
Get-FileHash .\MeshVault_Setup.exe -Algorithm SHA256

Build Metadata

Current Version v1.1.0
Release Date June 29, 2026
Package Size 120.1 MB
Supported Systems Windows 10 / 11 (64-bit)
Contents Windows Setup Installer (EXE)
⬇ Download MeshVault
◇ FAQ

Frequently Asked Questions

Unlike cloud storage services that store your data on third-party servers, MeshVault creates a peer-to-peer mesh network using your own devices. All data is encrypted before leaving your device with AES-GCM and envelope encryption, split into chunks, and distributed across the network. No company — not even Hagaratagi Technologies — can read your data.
Yes. MeshVault replicates data chunks across multiple peers in the mesh network. If one peer goes offline, your data is still available from other peers. The self-healing system automatically detects missing chunks and re-replicates them to maintain the required redundancy level.
MeshVault uses an envelope encryption architecture. Each file is encrypted with a unique File Encryption Key (FEK) using AES-GCM. The FEK is then wrapped under master keys. Key exchange for sharing uses X25519 elliptic curve Diffie-Hellman, and manifests are signed with Ed25519 digital signatures.
MeshVault uses local network broadcasting to automatically discover other MeshVault instances on the same network. When a new device is found, you receive a pairing request. Once confirmed, the devices establish a secure, cryptographically verified connection and begin participating in the mesh network.
Yes. MeshVault supports both password-protected file sharing and recipient-based secure sharing using X25519 key exchange. You can revoke recipient access, rotate passwords, and rotate file encryption keys at any time. All sharing events are recorded in the secure audit log.
Yes. MeshVault supports offline retrieval. Files cached locally on your device remain accessible even without internet or network connectivity. If other peers are on the same local network, you can retrieve files from them without needing internet access.
MeshVault is currently available as a free download. We believe secure storage should be accessible to everyone. Future enterprise features and premium tools may be offered separately, but the core product will always remain free.
MeshVault currently supports Windows 10 and 11 (64-bit systems). Cross-platform support for macOS and Linux is on the product roadmap.

Deploy MeshVault

Secure, distributed local storage. Designed by Hagaratagi Technologies.