AESus 🔐✝️👹

Because your secrets deserve more than earthly protection.

🧿 What is This?

AESus is a lean, word-based AES-256 encryption tool written in Rust, with just a hint of divine mischief. It turns memorable passphrases into strong encryption keys, helping you lock up your messages and files without resorting to arcane keyfiles or 32-character gibberish.

It’s built for privacy nerds, terminal romantics, and anyone who prefers encryption with a little style.

🌐 AESus Web App (Lite Version)

Want to encrypt messages in style, right from your browser?

👉 aesus.vercel.app

⚠️ Note: The web version uses simplified encryption (AES-256-CBC with SHA-256 derived key). For stronger, authenticated encryption (AES-256-GCM + PBKDF2 + salt + nonce), use the Rust CLI version.

Perfect for casual message locking or secret note passing. Not recommended for storing the nuclear codes.

✨ Features

• 🔑 Memorable passphrases → PBKDF2-HMAC-SHA256 → AES-256-GCM key
• 🔐 AES-256-GCM with random salt + nonce, versioned output
• 📁 File encryption/decryption with optional --out override
• 🧪 Message encryption with embedded salt + nonce (prints hex blob)
• 🎲 Diceware-style passphrase generator
• ⚙️ Clean and modern CLI built with clap
• 🦀 Fast, safe, zero-bullshit Rust implementation

📦 Installation

Install locally from source:

cargo install --path .

📡 Or globally (once published):

cargo install aesus

🔐 Examples

Encrypt a message:

aesus encrypt "Confess nothing" --key scythe-raven-lemon-halo

Returns an encrypted hex blob (salt + nonce + ciphertext), ready to share or stash.

Decrypt a hex blob:

aesus decrypt --hex 01abcd... --key scythe-raven-lemon-halo

Encrypt a file:

aesus encrypt --file secret.txt --key pancake-prophet-echo-oxide

Creates: secret.txt.aesus Or use --out to choose your own destiny:

aesus encrypt --file secret.txt --key ... --out recipe.sealed

Decrypt a file:

aesus decrypt --file secret.txt.aesus --key pancake-prophet-echo-oxide

Or save the result under any name:

aesus decrypt --file recipe.sealed --key ... --out final-form.txt

Generate a passphrase:

aesus generate --words 6

Output:

quest-ember-black-icicle-neon-crane

Memorable, weird, and more secure than hunter2.

🛠 Roadmap

• AES-GCM encryption with versioned format
• --out flag for flexible output paths
• Per-file random salt and nonce
• Diceware-style passphrase generator
• Config and vault-like features
• Cross-platform builds — Windows deserves privacy too, apparently
• GUI enhancements & WebAuthn/biometrics (maybe)
• Whispered Latin chants on success — a joke... unless?

📜 Disclaimer

AESus is not divine. It won’t recover your passphrase or stop you from encrypting your taxes as pancake.jeff.

Use responsibly. Backup your data. Don’t test encryption tools with your only copy of anything, unless you like pain.

🩸 License

MIT. Free as in freedom, and as in “free to use for your cursed backup rituals.”

🕳️ Contact

Made by Andrew Garcia Open to feedback, PRs, bug reports, or cryptic fanmail.