Back

Frontend & Encryption Logic

The Nest frontend is the single point of trust in our system. It is responsible for all cryptographic operations, ensuring that cleartext data never leaves your device.

Cryptographic Foundations

We utilize WebAssembly (WASM) for high-performance crypto:

  • libsodium-wrappers: Authenticated encryption (AEAD) and secret streams.
  • hash-wasm: High-speed Argon2id implementation.

High-Performance Chunking

Streaming Encryption

To handle files up to 10GB without crashing the browser, Nest employs a dual-layer chunking strategy. Data is streamed directly from disk to the encryption engine in 64MB memory buffers.

ResumableParallelMemory-Safe