enc

Encrypt any file or folder with one small, dependency-free binary. AES-256-GCM. No runtime to install — just download and run.

Version 0.3 writes privacy-preserving streaming v6/v7 files and still reads legacy v1-v5 files.

Large inputs stream in authenticated 1 MiB chunks, existing outputs are never overwritten, failed operations leave no partial file, and secrets/plaintext buffers are zeroized when released. New files use random external names; the original name and file/folder type are stored only inside encrypted metadata.

Install

Windows (PowerShell)

irm https://raw.githubusercontent.com/Xeze-org/enc/main/install.ps1 | iex

Linux / macOS

curl -fsSL https://raw.githubusercontent.com/Xeze-org/enc/main/install.sh | bash

Both installers verify the downloaded release binary against its published SHA-256 checksum before replacing an existing installation.

Docker (Alpine) — the Linux binary is static (musl), so it runs with no glibc

RUN apk add --no-cache curl \
 && curl -fsSL https://raw.githubusercontent.com/Xeze-org/enc/main/install.sh | sh
ENV PATH="/root/.local/bin:${PATH}"

Quick start

enc keygen              # make a key — SAVE the printed value
export ENC_KEY="<key>"  #  (PowerShell:  $env:ENC_KEY = "<key>")

enc diary.txt           # encrypt  ->  enc-<random>.enc
enc enc-<random>.enc    # decrypt  ->  diary.txt (name recovered securely)
enc Photos              # encrypt a whole folder

enc <path> figures out the direction from the file's content: plaintext → encrypt, an .enc file → decrypt (it prompts for the key/password).

Docs

• Usage & commands » — all modes, passwords, scripting, Docker, troubleshooting
• File format » — the on-disk .enc layout and versions

License

Apache-2.0 © Xeze