Skip to content
Crypt-in

Threat Model

What Crypt-in protects against

Section titled “What Crypt-in protects against”
  • Theft of device (PC, laptop, external drive)
  • Unauthorized physical access to PC or server
  • Remote exfiltration of encrypted files
  • Ransomware targeting already-encrypted files
  • Clone of dongle identity via same seed (mitigated by K_attestation)

What Crypt-in does NOT protect against

Section titled “What Crypt-in does NOT protect against”
  • Advanced physical chip attacks (side-channel, fault injection, electron microscope)
  • Malware with system-level privileges active during a decryption session
  • Server compromise with K_vault already loaded in RAM
  • Manual copy of content during an authorized session

Zero-knowledge guarantee

Section titled “Zero-knowledge guarantee”

lake8.dev is architecturally incapable of providing decryption keys to third parties. This is a construction property, not a policy promise.

“The root secret never leaves the dongle. lake8.dev cannot decrypt your files — not by choice, but because it is technically impossible.”