Blog
Field notes from the vault.
Cryptography, architecture, and the engineering decisions behind StenVault. Post-quantum KEMs, zero-knowledge authentication, file formats, and the occasional war story.
post-quantum
Not all post-quantum is equal: the fine print on Internxt's Kyber-512
Internxt ships Kyber-512 — NIST Level 1, and on its own. Why StenVault seals files at ML-KEM-768, Level 3, and always hybrid.
5 min read
post-quantumcvef
Harvest now, decrypt later: the attack that hasn't happened yet
Adversaries are storing encrypted data today to break it the day quantum computers arrive. Here's why that changes what "secure" means.
6 min read
CVEF v1.4: surviving the v1.3 downgrade attack
Why CVEF v1.3 was vulnerable to signature downgrade, and how v1.4 binds the envelope version into AAD to close it.
7 min read