A secure ECC-based encryption toolkit that packages authenticated ECIES-style workflows, reproducible command-line tooling, and a Codex helper for structuring engineering responses.
- Immersive web studio: Explore key generation, encryption, and decryption through a FastAPI-powered interface with live feedback.
- Authenticated ECIES flow: Uses ephemeral ECDH key exchange and AES-GCM to protect confidentiality and integrity for every message.
- Per-message randomness: Fresh salt and nonce values prevent ciphertext reuse and enable deterministic testing with golden fixtures.
- Auditable payload format: Encrypted outputs store metadata, associated data, and ISO 8601 timestamps inside a single JSON record.
- Secure key handling: Private keys are exportable with password-based encryption; helper CLI manages key generation, encryption, and decryption.
- AURUM Master Codex toolkit: Generate senior-engineer response templates for reviews and design documents with customizable command blocks.
encryption_engine.py: Authenticated encryption utilities and CLI entry point.encrypted_ip.json: Example encrypted record generated by the toolkit.aurum_codex/: Utilities for generating AURUM Master Codex-compliant response templates.tests/: Pytest suite covering the Codex helper and encryption flows.
Create a virtual environment and install the project in editable mode:
python -m venv .venv
source .venv/bin/activate
pip install -e .
pip install cryptography # required for encryption workflowspython encryption_engine.py generate-keys \
--private-out keys/recipient_private.pem \
--public-out keys/recipient_public.pem \
--password "change-this-passphrase"python encryption_engine.py encrypt \
--public-key keys/recipient_public.pem \
--plaintext "Confidential build artifact" \
--aad "build-id:1234" \
--out encrypted_artifact.jsonpython encryption_engine.py decrypt \
--private-key keys/recipient_private.pem \
--password "change-this-passphrase" \
--input encrypted_artifact.jsonThe decrypted plaintext is emitted to stdout. Provide --aad if you wish to
override or double-check the associated data recorded inside the payload.
Use the Codex helper to draft structured engineering responses:
python -m aurum_codex.assistant "Harden ledger sync pipeline" \
--file ledger/sync.rs --file docs/specs.md \
--assumption "Peers authenticated via mTLS" \
--command "cargo clippy --all-targets" \
--command "cargo test --all"Add --json for machine-readable output that downstream tooling can consume.
Install the optional FastAPI stack alongside the core dependencies and start the immersive UI:
pip install fastapi uvicorn
uvicorn webapp.main:app --reloadThen visit http://127.0.0.1:8000 to generate ECC key material, encrypt payloads, and decrypt them with instant feedback.
Run the full test suite, including CLI coverage for encryption workflows and web endpoints:
pytestThis project is licensed under the MIT License.
Created by Nathan Andrew Smith.