<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Libsodium on MEDDAH Mohamed</title><link>https://meddah.systems/tags/libsodium/</link><description>Recent content in Libsodium on MEDDAH Mohamed</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Fri, 01 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://meddah.systems/tags/libsodium/index.xml" rel="self" type="application/rss+xml"/><item><title>Zero-Trust Distributed Storage System</title><link>https://meddah.systems/post/infrastructure/zero-trust-storage/</link><pubDate>Fri, 01 May 2026 00:00:00 +0000</pubDate><guid>https://meddah.systems/post/infrastructure/zero-trust-storage/</guid><description>&lt;blockquote&gt;
&lt;p&gt;🚧 &lt;strong&gt;Full write-up coming soon.&lt;/strong&gt; This page is a placeholder — cryptographic architecture diagrams, code walkthroughs, and security validation results are being documented.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;h2 id="overview"&gt;&lt;a href="#overview" class="header-anchor"&gt;&lt;/a&gt;Overview
&lt;/h2&gt;&lt;p&gt;A content-addressed distributed storage system built from first principles with a Zero Trust authentication layer. Every node is treated as untrusted; access is governed by cryptographic proofs, not network perimeter.&lt;/p&gt;
&lt;h2 id="key-properties"&gt;&lt;a href="#key-properties" class="header-anchor"&gt;&lt;/a&gt;Key Properties
&lt;/h2&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Property&lt;/th&gt;
&lt;th&gt;Implementation&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Encryption&lt;/td&gt;
&lt;td&gt;Client-side AES-256-GCM via libsodium&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Integrity&lt;/td&gt;
&lt;td&gt;Merkle DAG verification&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Replication&lt;/td&gt;
&lt;td&gt;3-node with cryptographic consistency&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Access Control&lt;/td&gt;
&lt;td&gt;Attribute-Based Encryption + Proxy Re-Encryption&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Authentication&lt;/td&gt;
&lt;td&gt;JWT Ed25519 Proof-of-Possession&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Anti-Replay&lt;/td&gt;
&lt;td&gt;Nonce-based, TTL 30s&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;h2 id="stack"&gt;&lt;a href="#stack" class="header-anchor"&gt;&lt;/a&gt;Stack
&lt;/h2&gt;&lt;p&gt;&lt;code&gt;Go&lt;/code&gt; &lt;code&gt;Java&lt;/code&gt; &lt;code&gt;libsodium&lt;/code&gt; &lt;code&gt;AES-256-GCM&lt;/code&gt; &lt;code&gt;Attribute-Based Encryption (ABE)&lt;/code&gt; &lt;code&gt;JWT Ed25519&lt;/code&gt;&lt;/p&gt;
&lt;h2 id="status"&gt;&lt;a href="#status" class="header-anchor"&gt;&lt;/a&gt;Status
&lt;/h2&gt;&lt;ul&gt;
&lt;li&gt;&lt;input checked="" disabled="" type="checkbox"&gt; System designed and implemented&lt;/li&gt;
&lt;li&gt;&lt;input checked="" disabled="" type="checkbox"&gt; Validated against 6 security objectives including node collusion resistance&lt;/li&gt;
&lt;li&gt;&lt;input disabled="" type="checkbox"&gt; Full cryptographic write-up in progress&lt;/li&gt;
&lt;/ul&gt;</description></item></channel></rss>