bxenc artifact / real demo files

Whitespace stego pipeline.

bxenc is a Rust CLI encryption vault with a steganography layer. This demo uses real local files: notes.txt contains only tabs and spaces, but decodes into a BXENC encrypted payload.

Rust XChaCha20-Poly1305 Argon2id Zeroize Atomic Writes
message
The eagle has landed in Stockholm
34plaintext bytes including newline
ASCIIhuman-readable source message
stdinpassed into bxenc encrypt
structure
7B header + 16B Argon2id salt + 24B XChaCha20 nonce + 50B ciphertext/tag = 97 raw bytes
BXENCmagic header confirmed
v1 / mode 0version and password mode
50B34B plaintext + 16B Poly1305 tag
The raw file math closes: 97 bytes total, with 50 bytes of ciphertext plus authentication tag.
decoded prefix
84 00 00 00 = length prefix 132, followed by 132 bytes of base64 payload
1,088whitespace characters
498 / 590tabs / spaces, zero other chars
8xbit-to-whitespace overhead
To a human reader or a diff tool, notes.txt looks empty. Decoding the tabs and spaces recreates the BXENC ciphertext.
independent recovered output
PRIVATE_KEY_DATA_DO_NOT_LEAK
132Breveal.bxenc size
29Brecovered.dat plaintext
authPoly1305 tag verified
recovered.dat proves a second successful decryption path from reveal.bxenc, separate from the whitespace-wrapped secret.bxenc demo.
Status: bxenc is an unaudited research implementation and USB-distributed demo artifact, not a production password manager or public source release.