About CIBHER

Mission

CIBHER is a cryptographic runtime engine for securing business communications and sensitive data. It is written in Rust, which removes a class of memory-safety defects. CIBHER runs on macOS 13 or later on Apple Silicon and on Windows 11, or Windows 10 version 2004 or later. Intel Macs are not supported.

CIBHER is built for professional practices — law firms, accounting offices, medical facilities — where the routine risk is a document going to the wrong recipient. It makes encryption and the recipient check part of the ordinary send, rather than a separate step someone has to remember.

Core Values

• Automated Security: Combines standard file encryption with an automated Optical Character Recognition (OCR) verification layer.
• Recipient verification: CIBHER reads the document, extracts identifiers, and compares them against the recipient profile you selected. Where they do not match, the send is blocked. This is designed to catch the wrong-attachment mistake. CIBHER is not a data loss prevention product and is not designed to stop a determined insider.
• Shared core: One Rust core runs on both supported platforms, so the logic and the cryptography are identical on each.
• What works offline: Encryption, decryption, key generation and the recipient-verification gate run on your machine and need no network connection. Activating a licence contacts our activation service and binds the licence to that machine. After that, validation happens on the machine itself — with one exception: a paid subscription quietly refreshes its licence with our service while you are online, so that a cancellation or refund can take effect. Nothing about your documents, recipients or keys is sent in that refresh. The free tier needs no activation and no account at all.

How It Works

Manual Mode (Ad-hoc Encryption)

The user selects a file, and the system encrypts it with hybrid post-quantum encryption: ML-KEM-768 combined with X25519 to derive an AES-256-GCM content key, signed with ML-DSA-65. The output is an encrypted file (.cib) and a key. Document encryption is the part that is post-quantum — pairing attestation, licence signing, transport and the at-rest page cipher are classical.

Profile Mode (Verified Sending)

The engine reads the document and extracts identifiers. They are matched against the trusted profile of the selected recipient. On a match, the file is encrypted and sent. On a mismatch, the send is blocked.

Technology

CIBHER runs on macOS 13 or later on Apple Silicon and on Windows 11, or Windows 10 version 2004 or later. Intel Macs are not supported. The verification module can check a counterparty against a public business register: GUS and KRS in Poland, and VIES for EU VAT numbers. No other register is supported. A look-up is optional, is never performed silently, and is disclosed to you before it runs.