2026 · Engine and server ready, IdP authentication pending
Vault
The core of a zero-knowledge password manager.
RustAxumsqlxPostgreSQLWASMUniFFIOIDC
V
The problem
Prove that the client-side cryptography and server contract of a zero-knowledge password manager can actually be implemented and tested.
How I built it
- KDF and key hierarchy in a dedicated Rust crate.
- AEAD encrypted blobs, sharing and transactional sync.
- Ed25519 per-device keys and a recovery kit.
- Axum + sqlx routes matching openapi.yaml; WASM, Kotlin and Swift bindings via UniFFI.
What works today
- 9 passing tests on the crypto engine.
- 5 integration tests against a real PostgreSQL: ETag/409, sync and idempotency.
- Compiled WASM crate; Kotlin and Swift bindings generated.
NoteNot production-ready without an external security audit: the real status is documented in the repository.