About SignNext Secure Share
SignNext Secure Share is a privacy-first, zero-knowledge file sharing tool built directly into the web browser. It allows developers and privacy-conscious users to transfer sensitive files, .p12 certificates, app binaries, and documents with client-side end-to-end encryption.
Zero-Knowledge Cryptographic Architecture
PBKDF2 Key Derivation
Your 6-digit secret PIN derives a 256-bit AES encryption key using PBKDF2 with HMAC-SHA-256 and 100,000 iterations inside your browser runtime.
W3C AES-256-GCM Cipher
File byte streams are encrypted locally using AES-256-GCM authenticated encryption. Server operators see only unreadable cipher-text blocks.
WebRTC Peer Channel
On the same WiFi or local NAT network, files stream directly between devices via WebRTC RTCDataChannel with zero cloud disk interaction.
Cloud Fallback Purge & Zero Logs
When WebRTC peer channels are unavailable due to restrictive firewalls:
- Encrypted Payload Storage: Browser-encrypted cipher-text chunks are temporarily stored in Cloudflare R2 object vaults.
- 30-Minute Auto-Purge TTL: Objects automatically expire and are permanently wiped after 30 minutes.
- Zero Key Storage: Decryption PINs are derived strictly on receiver devices. Our servers never receive or log encryption keys.