TrueLock

What is TrueLock

TrueLock is an innovative security platform designed for "secure messaging without a messenger." It allows users to package sensitive messages and attachments into self-contained encrypted files known as capsules (.cfcaps). Unlike traditional platforms that rely on centralized servers, TrueLock embeds security policies directly into the file, enabling secure sharing via any channel—including email, Telegram, or USB—while maintaining strict control over how and when the data is accessed.

Key Features

• Encrypted Capsules (.cfcaps): A unique file format that bundles messages and attachments with an encrypted policy tree, ensuring data remains secure during transport.
• Embedded Unlock Policies: Access rules travel with the ciphertext, allowing the file to "know" exactly when, where, and how it can be decrypted.
• Advanced Unlock Rules: Set precise conditions for decryption, such as specific time windows, geographic radius (Geo-Radius), password protection (using Argon2id), and visual keys.
• Logical Gate Support: Combine multiple unlock conditions using AND/OR logic, such as requiring both a password and a specific physical location for access.
• Strong Cryptography: Employs industry-standard Authenticated Encryption with Associated Data (AEAD) using AES-GCM or ChaCha20-Poly1305.

Use Cases

• Platform-Agnostic Secure Sharing: Send sensitive data over any untrusted channel (e.g., standard email) without relying on a central messaging service's security infrastructure.
• Conditional Data Release: Securely share files that only become accessible during a specific time window, ideal for legal documents or embargoed announcements.
• Location-Bound Access: Ensure that confidential corporate or personal data can only be decrypted when the recipient is physically present at a designated site.
• Offline Secure Transfer: Safely move encrypted data via physical media like USB drives with built-in access controls that work without an active internet connection.