enigmastick

Software / made for Enigma Stick

Put the hardware
to work.

Explore the device from a terminal, encrypt a file, or keep a local vault of secrets. These tools are built specifically for Enigma Stick.

01 / Device operations

Enigma CLI

Status, authentication, key management, signing, encryption, and key agreement. A direct way to explore the USB command interface.

CLI guide
Terminal
enigma-cli status
enigma-cli authenticate
enigma-cli list-keys --type EC
enigma-cli lock

02 / File encryption

Enigma Seal

Seal encrypts files on your computer with AES-256-GCM, then uses the stick to encrypt the file encryption key.

Seal guide
Terminal
enigma-seal --encrypt \
  --path notes.txt \
  --label file-key

# Output: notes.txt.seal

03 / Local secrets

Enigma Keyring

Store encrypted secret values in SQLite. The local database holds the ciphertext; Enigma performs encryption and decryption.

Keyring guide
Terminal
enigma-keyring create github/personal
enigma-keyring list
enigma-keyring get github/personal

For your own software

A library underneath.
An open interface ahead.

The Rust host library exposes typed device operations and a C interface for other applications. Seal and Keyring use this library. The current Go CLI has its own host implementation.

The tools are under development and their repositories are not public yet. Build instructions document the current source layout; public source links will appear in the project directory.