Changelog

Version 2.0.0

Added — new engine & core app

• Task-first interface with a Simple/Advanced two-layer design: Encrypt (file, folder, or text, with drag & drop), Decrypt (file or pasted message), Contacts, My Identity, and Settings.
• Modern crypto engine — authenticated AES-256-GCM or ChaCha20-Poly1305; protection by password (PBKDF2-SHA256), your own key or a person's key (RSA-3072 hybrid, RSA-OAEP-SHA256), or a raw session key.
• Self-describing .eenc container that records how each item was protected, so decryption can auto-detect it.
• Shareable identity cards (vCard .vcf) and public-key export (.pem).
• Single-instance guard, About/Splash screens showing the version, and a session-key generator plus a container inspector under Advanced mode.

Added — multiple identities & portable backup

• Multiple identities — keep separate keys (e.g. Work and Personal); create, switch, and delete them (the only identity can't be deleted). Existing single identities migrate automatically.
• Automatic key selection — an item encrypted for a specific identity opens against that identity, with a clear message if it isn't on this PC.
• Identity backup & restore — export an identity (private key included) as a passphrase-encrypted .eeid file that survives a reinstall or moves to another PC, then restore it there. Closes the previous permanent-data-loss gap for key-based encryption.
• Bulk contacts — export all contacts to one card file, and import many at once (de-duplicated by fingerprint, malformed entries skipped).

Added — open legacy 1.x files (decrypt-only)

• The Decrypt screen recognizes and opens containers from the original EncryptEngine 1.x, auto-detected with no mode picking.
• Password items (SALT: text blocks and .encv0 files) and public-key items — the old key is detected on startup and shown as a read-only "Legacy identity (v1)".

Changed

• Encrypt / Decrypt buttons lock after a run until Reset, preventing accidental re-runs (a cancelled or invalid run stays retryable).
• Progress for every operation — an animated bar for text/folder phases and bulk contacts, byte-level progress for files.
• New app icon, in-app logo, and Store tiles, plus a wordmark splash.

Fixed

• Identity name no longer bleeds when switching identities (covered by a regression test).
• Build-number parsing for the auto-increment target.

Security

• Private keys are sealed at rest with Windows DPAPI (CurrentUser) and never leave the process unsealed; .eeid backups are passphrase-encrypted.
• Optional secure overwrite ("shred") of originals after encryption.
• Note: opened legacy 1.x items have no authentication tag (the old format predates it), so a wrong password or corruption can't be cryptographically distinguished.

Version 1.0 – 1.2

Original Release

• RSA key pair generation on startup
• AES-256 session key generation and RSA-encrypted key exchange
• Text encryption and decryption using an RSA key, a pasted public key, an AES session key, or a password
• File encryption and decryption with streaming block processing and a real-time progress bar
• Password-based encryption with a random 16-byte salt stored alongside the ciphertext
• Fully offline operation

Superseded by the 2.0.0 rewrite. Files and messages from 1.x can still be opened by 2.0.0 (decrypt-only).