fee189aec3d1da91a8f474f54151ec8a8d8dc119
Repository skeleton (app id ng_backup, AGPL-3.0-or-later), KeyRing with KDF subkeys, keyed blob ids and Argon2id key wrapping, and StreamCipher (secretstream XChaCha20-Poly1305, framed, bounded memory). Spike A: 1 GiB round trip with memory_limit=64M, peak < 2 MiB, ~160/122 MiB/s; tampering, truncation, wrong key/passphrase are rejected.
NG Backup
Encrypted, incremental backups of Nextcloud with restore from the web interface. Works without shell access: no external programs, no extra PHP extensions beyond sodium.
Status: phase 0 (prototype). Not usable yet. See PLAN.md for the design.
License: AGPL-3.0-or-later.