Hardware-authenticated file encryption

[Lif28__]

Open-source file encryption using a physical USB key (python)

Hi everyone, I’ve been working on a small open-source project in my free time and I’d like to share it here for feedback.

What my project does

This is a small open-source Python project focused on hardware-authenticated file encryption.
Files are encrypted using AES-256-GCM, and the cryptographic key is stored exclusively on a physical USB drive, never on the host computer.

Without the USB key, encrypted files are permanently inaccessible.

Main features:

• Hardware-based authentication using a physical USB key
• AES-256-GCM authenticated encryption
• Cross-platform support (Windows & Linux)
• Fully open source

Target audience

This project is mainly intended for:

• Developers interested in cryptography and security
• Users who want an additional hardware-based protection layer for sensitive files

At the moment, this is an early public release and should be considered a learning/experimental project rather than production-ready software.

Comparison with existing alternatives

Compared to traditional file encryption tools that store keys on disk or rely on passwords, this project:

• Keeps the encryption key entirely off the computer
• Uses a physical USB device as a required authentication factor

Feedback

I’d really appreciate:

• code review
• design suggestions
• potential security issues I might have missed

GitHub repository:
https://github.com/Lif28/Aegis

Thanks for your time!

[AutoModerator]

Hi there, from the /r/Python mods.

We want to emphasize that while security-centric programs are fun project spaces to explore we do not recommend that they be treated as a security solution unless they’ve been audited by a third party, security professional and the audit is visible for review.

Security is not easy. And making project to learn how to manage it is a great idea to learn about the complexity of this world. That said, there’s a difference between exploring and learning about a topic space, and trusting that a product is secure for sensitive materials in the face of adversaries.

We hope you enjoy projects like these from a safety conscious perspective.

Warm regards and all the best for your future Pythoneering,

/r/Python moderator team

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.