Kryptos

Inspiration

We are really interested in cybersecurity and hacking, and we thought this opportunity would be great to put those skills into practice by building a secure password manager. We also felt that a mobile app would be more handy for everyday usage.

What it does

Kryptos is a tool that allows users to safely store their passwords both locally and in the cloud, so they can access them anytime. It also supports the generation of strong, secure passwords.

How we built it

We built Kryptos as a mobile app using Flutter and Dart. The local database is SQLite, while the remote database is hosted on Supabase.

Regarding security, we integrated the liboqs library to implement ML-KEM-768, creating a hybrid encryption scheme. This is combined with AES-256-GCM for authenticated encryption and Argon2id for secure key derivation from the master password.

Challenges we ran into

The biggest challenge was making post-quantum cryptography work with Flutter. Even though Open Quantum Safe provides a Dart library, most operations needed to be isolated to prevent application crashes.

Accomplishments that we're proud of

We are especially proud of the balance achieved between a clean user interface and an uncompromising security layer. Integrating post-quantum cryptography into a smooth mobile experience, while ensuring the underlying cryptography can withstand future threats, is a milestone for us.

What we learned

We learned how to integrate cryptography into user-facing applications, successfully combining high-level security with practical usability.

What's next for Kryptos

We plan to continue development by creating a browser extension that also allows accessing the password vault and a desktop application, allowing users to manage their password vaults from their desktops and not just their phones.