Encrypt and Decrypt Files

CQ VAULT

Creators Quest — File Encryption Suite

.cqvf — CQ Vault Format — AES-GCM-256

Mode:

Cipher:

Lite Mode — Mobile Optimised

Input Files

Drop files here or click to browse

Any file type accepted

Encryption Key

Encrypted Files Ready

Mode:

Auto-detect .cqvf — reads cipher mode from file header automatically

Input .cqvf Files

Drop .cqvf files here or click to browse

.cqvf format accepted

Decryption Key

Decrypted Files Ready

CQVF — File Format Specification

Extension

.cqvf

Magic Bytes

43 51 56 46

Std Cipher

AES-GCM-256

Lite Cipher

AES-GCM-128

KDF

PBKDF2-SHA256

Iterations (Std)

600 000

Iterations (Lite)

100 000

IV Length

12 bytes

Salt Length

16 bytes

GCM Tag

128 bits

Version

v1

Autodetect

Yes (header)

Binary layout (bytes): 43 51 56 46 | VER MODE NAMELEN[2] MIMELEN[2] NAME[n] MIME[m] SALT[16] IV[12] | CIPHERTEXT+GCM_TAG

Magic=CQVF   VER=0x01   MODE: 0x01=AES-256, 0x02=AES-128(Lite)   NAMELEN/MIMELEN = uint16 little-endian

Security Notes

Every file uses a freshly generated random 16-byte salt and a random 12-byte IV derived per encryption operation via crypto.getRandomValues(). The GCM authentication tag provides ciphertext integrity — a wrong password or tampered file will fail at decryption. The original filename and MIME type are stored in the header so files are restored correctly without any guessing.

Lite Mode uses 128-bit keys (AES-128) with fewer PBKDF2 iterations — noticeably faster on low-end mobile hardware. Still secure for most personal use; avoid for highly sensitive documents on shared devices.

CQ VAULT — CREATORS QUEST — CLIENT-SIDE ONLY — NO FILES LEAVE YOUR DEVICE