Features
Authenticated Encryption
ChaCha20-Poly1305 for confidentiality and integrity
Separate Encryption
Config and rootfs encrypted independently
Direct Execution
Decrypt and run without persistent decrypted files
Secure Transport
Safe to distribute via untrusted channels
Installation
# Encrypt TIM to STIM
borg tim encrypt app.tim -p "password" -o app.stim
# Run encrypted container directly
borg run app.stim -p "password"Usage
STIM Structure
┌─────────────────────────────────────┐
│ Magic: "STIM" (4 bytes) │
├─────────────────────────────────────┤
│ Trix Header (JSON) │
│ - encryption_algorithm │
│ - tim: true │
│ - config_size: uint32 │
│ - rootfs_size: uint32 │
├─────────────────────────────────────┤
│ [config_size: 4 bytes BE uint32] │
│ [encrypted config] │
│ [encrypted rootfs tar] │
└─────────────────────────────────────┘Quick Links
More from Lethean R&D Labs
Fancy helping out?
Spotted a bug? Got an idea? We'd love to hear from you.
Read the contributing guide →