keyarc-zero-knowledge

What problem does it solve?

This Skill provides guidance for implementing a true zero-knowledge encryption layer in KeyArc, ensuring the server never sees plaintext secrets or passwords by performing all cryptographic operations in the browser.

Core Features & Use Cases

• Client-side cryptography: all encryption and decryption occur in the browser using the WebCrypto API.
• Argon2-based key derivation and authHash: master password handling and authentication happen entirely client-side.
• Server data model: the server stores only ciphertext, auth hashes, and public metadata, never plaintext secrets.
• Use cases: user signup/login, secret creation/updates, vault sharing, and cryptographic key management.
• Example scenario: a user signs up, derives a master key in-browser, computes an authHash, and retrieves encrypted keys for local decryption.

Quick Start

Integrate the zero-knowledge flow by deriving the master key on the client, computing an authHash, authenticating to the server, and decrypting vault keys locally to access encrypted secrets.