reVault: Rust-based secure archive format enters beta

The author has been developing reVault for approximately two years. The project was originally written in Dart but has been ported to Rust using AI assistance. reVault is currently in beta, and the developer is seeking feedback specifically regarding its language bindings. The core of the software is written in Rust, with bindings available for C/C++, Java, Dart, Python, Ruby, JS/TypeScript, Go, C#, Kotlin, Lua, PHP, and Swift. The project intends to phase out remaining C code as alternatives become available.

A reVault lockbox is encrypted, signed, and compressed by default. It supports hybrid post-quantum or passphrase encryption, including metadata. The format uses Zstd compression. A lockbox can store files, directories, permissions, symlinks, and variables. Variables, forms, and the lockbox itself can have descriptions. The API allows reading, writing, and seeking within files without extracting them to the filesystem. Updates are transactional with automatic rollback for failed updates. The format is designed for recovery by storing content in pages to allow unaffected content recovery if part of a lockbox is corrupted.

reVault supports Linux, macOS, Windows (x64 and arm64), and Wasm. It uses a portable vault to hold keys, contacts' keys, lockbox aliases, and form definitions. Logging into the desktop unlocks the vault by tying into the platform's secure store. Users can disable the requirement to enter a passphrase every time they access a lockbox. Creating a lockbox stores an alias in the vault based on its filename or a chosen name. The project has been scanned using OpenAI's Daybreak cyber security tools.