Encrypt
PBKDF2 100k iter · salt acak · 18 rounds · block 16 byte · HMAC-SHA256.
Hardened v5: PBKDF2 100k · salt acak · HMAC cover salt+IV+body · S-Box SHA-256 KDF · MixBytes non-linear · constant-time compare · error generic · baru: Encrypt file binary.
Decrypt
Tag HMAC diverifikasi dulu sebelum decrypt. Error selalu generic.
File
Encrypt/decrypt file (binary-safe). Output: .nyom2. Nama file asli disimpan ter-enkripsi di dalam payload.
Format container: MAGIC(8) ‖ salt(16) ‖ IV(16) ‖ body(16n) ‖ tag HMAC(32). File diproses per chunk biar UI nggak freeze. Mode file selalu CBC (ECB untuk file = pola kelihatan, jangan).