Voider Paste

Zero-knowledge encrypted pastebin with post-quantum cryptography.

Features

• Post-quantum encryption - CRYSTALS-Kyber (ML-KEM-768) + AES-256-GCM
• Syntax highlighting - 300+ programming languages via Prism.js
• Zero-knowledge - Server never sees your unencrypted content
• Auto-delete - Configurable expiry (10 min to 7 days)
• Password protection - Optional additional layer of security
• QR code sharing - Generate QR codes with encrypted short links
• No signup required - Just paste and share

Tech Stack

• Frontend: React 19, Vite 7, Tailwind CSS 4, Framer Motion
• Backend: Cloudflare Workers
• Database: Turso (SQLite)
• Encryption: @noble/post-quantum, Web Crypto API

Development

Prerequisites

• Node.js 20+
• npm or pnpm

Setup

# Install dependencies
npm install

# Start development server
npm run dev

Environment Variables

Copy .env.example to .env and configure:

VITE_API_URL=http://localhost:8787/api

API

The API is a Cloudflare Worker located in the /api folder.

cd api
npm install
npm run dev

See /api/README.md for API documentation.

Deployment

Frontend (Cloudflare Pages)

npm run build
wrangler pages deploy dist --project-name=voider-paste

API (Cloudflare Workers)

cd api
wrangler deploy

Cryptography

All encryption happens client-side:

1. Generate Kyber-768 keypair (post-quantum resistant)
2. Encapsulate to create shared secret
3. Use shared secret as AES-256-GCM key
4. Encrypt content with AES-GCM
5. Secret key goes in URL fragment (never sent to server)

License

MIT License - See LICENSE file

Contributing

1. Fork the repository
2. Create your feature branch
3. Commit your changes
4. Push to the branch
5. Open a Pull Request