Absolute Transparency. Zero Compromise. Source Available.

Technical details for developers and privacy enthusiasts.

Purchase Today
View Demo

Cryptographic Architecture

Merkle trees and hash sharding for secure, scalable storage

Merkle Tree Structure

ExoServe builds its file system as a Merkle tree, where each node is cryptographically linked to its children. This creates an immutable audit trail and ensures data integrity.

Files and folders are encrypted with unique keys and stored as leaf nodes in the tree. Folder structures are obfuscated through cryptographic hashing.

Cryptographically linked nodes

Immutable audit trail

Obfuscated directory structure

Structure: Merkle Tree
AES-256-GCM SHA-256

Cryptographic Structure

a8f5f167...[root]
b9e6a278...[Client Document]
c1d2e3f4...[Progress Report]

Hash Sharding

Distributing files across nested directories for scalability

Storage Architecture

Files are stored using hash sharding to distribute them across nested directory structures per user sandbox. This approach:

  • Prevents filesystem limits
  • Maintains consistent performance
  • Keeps file topology completely hidden
  • Enables millions of files without degradation

Hash Sharding Example

Directory structure

sandbox/
a8/
f5/
a8f5f16789012345...
b9/
e6/
b9e6a27890123456...
Total file topology obfuscation

In-the-Dark Flow

Complete end-to-end encryption using Web Crypto API

Web Crypto API Usage

All cryptographic operations happen in the browser using the native Web Crypto API. The process:

  1. 1 Generates unique encryption keys for each file
  2. 2 Encrypts file content and folder relations with AES-GCM
  3. 3 Uploads encrypted blobs to server
  4. 4 Stores stores only encrypted data on the server

Encryption Process

Code example

// Generate key
const key = await crypto.subtle.generateKey(
{ name: "AES-GCM", length: 256 },
false,
["encrypt", "decrypt"]
);
// Encrypt file
const encrypted = await crypto.subtle.encrypt(
{ name: "AES-GCM", iv: iv },
key,
fileBuffer
);
// Upload to server
await fetch('/node', {
method: 'POST',
body: encrypted
});

Minimalist Stack

Vanilla JS frontend, Python Flask backend - no heavy dependencies

Frontend

  • Vanilla JavaScript (ES6+)
  • Web Crypto API for all cryptography
  • HTML5/CSS3 only
  • Service Worker route interception

Backend

  • Python Flask
  • No ORM or heavy frameworks
  • Direct filesystem access
  • System libraries for all cryptography

Architecture Overview

Source Available
Browser
Vanilla JS
Web Crypto API
Service Worker
Server
Python Flask
Direct Filesystem
Minimal DB
Security
In-the-Dark
End-to-End
Cryptographic

Technical Benefits

Why developers choose ExoServe for privacy-focused solutions

Security

Complete in-the-dark architecture with end-to-end encryption.

Transparency

Source available with no hidden dependencies or backdoors.

Performance

Hash sharding and streaming for fast access to large files.