A CLI tool that splits files into encrypted fragments using Shamir's Secret Sharing, requiring only a threshold of fragments to reconstruct the original.
Horcrux is a command-line tool that encrypts and splits files into multiple fragments using Shamir's Secret Sharing. It allows users to distribute these fragments across different locations and reconstruct the original file by gathering only a specified threshold of fragments, eliminating the need to remember a passcode.
Individuals who need to securely encrypt sensitive files like diaries or documents and want to avoid password memorization, as well as those transmitting files across multiple channels to reduce interception risk.
Horcrux offers a unique approach to file encryption by removing the dependency on passwords through threshold-based fragment reconstruction, providing both security and redundancy without complexity.
Split your file into encrypted fragments so that you don't need to remember a passcode
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Allows specifying total fragments and the minimum required for reconstruction, providing redundancy as shown in the split command's interactive prompts for numbers like 5 fragments with a 3 threshold.
Eliminates passcode memorization by splitting encryption keys among fragments using Shamir's Secret Sharing, ensuring no single fragment can reveal the original file.
Uses Go's crypto/rand for secure key generation and adapts Hashicorp's proven Shamir's Secret Sharing implementation, as noted in the FAQ for reliable encryption.
Offers only two commands, split and bind, with intuitive prompts that guide users through the process, making it accessible without complex configuration.
The README highlights issue #4 related to data integrity, meaning fragments lack built-in verification for corruption or tampering, which is a critical security gap.
Requires users to manually disperse and recall fragment locations, which can lead to loss if not meticulously tracked, as emphasized in the splitting instructions.
Lacks advanced options like GUI support, API access, or streaming capabilities, making it less versatile compared to tools like GPG or enterprise solutions.