Reference

Conformance

An implementation declares which of three levels it supports. A higher level includes the lower ones. This page opens the published vectors in your browser and runs all three checks against the same code the app and the CLI use.

The three levels

  1. L1 — Parse

    Read a vault's structure without a passphrase: valid JSON, the right format identifier, KDF and cipher parameters that decode to the exact byte lengths, and a well-formed Merkle root.

  2. L2 — Integrity

    Given the passphrase, confirm the plaintext is exactly what the vault commits to: every cell's recomputed hash matches, ids are unique, and the Merkle root of the cell hashes equals the vault's root.

  3. L3 — Crypto round-trip

    Reproduce the exact bytes: opening the example vault yields a plaintext byte-for-byte equal to its canonical JSON, and a wrong passphrase is rejected rather than returning partial plaintext.

Run the vectors

The vectors are the file vectors.json, fetched from this same origin and checked in the page. Nothing is uploaded.

Not run yet.

L1 — Parse

Structural checks over the example vault, without a passphrase.
CheckResultDetail

L2 — Integrity

Per-cell canonical hashes and the Merkle root, recomputed from the vector cells.
CheckResultDetail

L3 — Crypto round-trip

Decryption of the example vault with the vector passphrase.
CheckResultDetail
← Usage FAQ →