Storacha Verifiable Encrypted Storage (VES) - 12-18th August 2025 - PLDG 4

[adielliot37]

Storacha Verifiable Encrypted Storage (VES) - 12th August 2025 - PLDG 4 (updated 18th August)

Contributors

• @adielliot37

Accomplished Tasks

• Client-Side AES-256-GCM Encryption
  • File encryption in the browser with keys stored only in memory.
• Key Management Enhancements
  • Added generate / import / derive-from-password flows with encrypted backup & restore.
• Storacha MCP REST Integration
  • Upload of encrypted chunks and manifest (Merkle root, IVs, CIDs).
  • Hardened server response handling with safer CID extraction.
• Merkle Tree & Proof Verification
  • Verification of chunk integrity without decryption.
• Frontend UI
  • Responsive React interface with status banner, progress indicators, and clearer key/file flows.
• Backend API
  • Node.js Express server with safer JSON parsing and explicit error detection.
• Documentation
  • Expanded README with detailed crypto flow, manifest structure, and usage.

Update

What went well

• End-to-end secure storage with verifiable integrity checks.
• Full key lifecycle management (session-only, optional export/import).
• Clearer frontend UX and stronger backend error handling.

Related PRs and Links

• Repository Link
• Live App
• Detailed Blog by @gojo

Next Tasks

• Add ZK-based verification for proofs.
• Visualize Merkle tree verification in the UI.
• Improve multi-file handling and larger file support.
• Extend test coverage for server + encryption flows.