Dexios is a fast, secure, and open source command-line encryption tool. It's written entirely in Rust and prioritises security, performance and convenience the most. It uses modern cryptographic AEADs (XChaCha20-Poly1305, AES-256-GCM, and Deoxys-II-256), with audited backends to ensure the safety and integrity of your data. It's extremely easy to use Dexios before uploading your files to a cloud service, to ensure that no prying eyes can read them.
For notes on Deoxys-II, please see the Security Notices section of the Documentation.
You can install Dexios through cargo, with
RUSTFLAGS="-Ctarget-cpu=native -Ctarget-feature=+aes,+sse2,+sse4.1,+ssse3" cargo install dexios
The RUSTFLAGS tell the Rust compiler to optimise the binary for your processor's architecture, and to enable features that will speed up cryptographic functions. It really is a lot faster!
Or you can download a pre-compiled binary from the releases page!
If you like my work, and want to help support the project, feel free to donate! This is not necessary by any means, so please don't feel obliged to do so.
XMR: 84zSGS18aHtT3CZjZUnnWpCsz1wmA5f65G6BXisbrvAiH7PxZpP8GorbdjAQYRtfeiANZywwUPjZcHu8eXJeWdafJQFK46G
BTC: bc1q8x0r7khrfj40qd0zr5xv3t9nl92rz2387pu48u
ETH: 0x9630f95F11dFa8703b71DbF746E5c83A31A3F2DD
We made a lot of (necessary) changes to how Dexios works. In hindsight, earlier versions should've been v0.x.x, but it's too late for that.
Going forward, starting with version 8, we have zero plans to make any incompatible changes. The header prepended to the start of each encrypted file contains a version identifier, and with that, we can be sure to always keep and maintain support for older versions.
We encourage anyone who used an older version of Dexios to decrypt their files, update, and re-encrypt at your earliest convenience. This is to ensure that your files use the new header standard.
Currently, we only provide support for two operating systems - Linux (all distributions), and FreeBSD. Dexios has been tested by myself as working on many Linux distributions, and on FreeBSD 13, 13.1 and 14.
I personally have no plans to support Windows at this moment in time. Most things within Dexios should work on Windows, except termion and reading the password input from the terminal. You are welcome to submit a PR if you'd like to add this functionality, or a Github issue requesting it - I'm not fully against the idea at all (it's just not at the top of my priorities right now).
Contributions are very welcome! You're free to submit a PR and I'll take a look at it, provide feedback and (most likely) merge it, provided the tests pass.
To encrypt a file:
dexios encrypt secret.txt secret.enc
And to decrypt that same file:
dexios decrypt secret.enc secret.txt
To securely erase a file:
dexios erase secret.txt
Dexios will receive frequent updates, and they are always tested before being released.
Version 8.0.0 did make some breaking changes, and we'd like to apologise for this. The previous headers (containing salt, nonce, etc) we not standardised, and varied in size from 24 bytes to 40 bytes. With v8.0.0, this has been changed completely - now each header is the first 64 bytes of the file, and it contains information such as what mode the file was encrypted in, and which AEAD algorithm was used. It also contains a version tag, meaning we can update things while still supporting older files. We apologise for the inconvenience caused.
Please report any vulnerabilities as a Github issue - we believe all issues should be known, and they are likely to get resolved very quickly this way. Thank you.
As an alternative, you may contact brxken128@tutanota.com
If you find any vulnerabilities within Dexios, and can provide steps/pointers to reproduce, please report them. You may do this anonymously via the email above. I'm afraid I cannot offer any money in return, but I can add you to the list of contributors (at your request).
| Version | Supported | | ------- | ------------------ | | 8.x.x | :whitecheckmark: | | 7.x.x | :whitecheckmark: | | 6.x.x | :x: | | 5.0.x | :x: | | 4.0.x | :x: | | < 4.0 | :x: |
Please view the Documentation to find all of the information related to this project.
It receives frequent updates and is the main source of documentation for Dexios.