Sakhar downloads section
⬇ Sakhar 1.2.5: DMG (sandbox) | DMG
why?
Imagine a situation where someone persistently asks you to provide the password for your encrypted archive. Moreover, this person knows about the existence of hidden volumes in VeraCrypt.
Another situation is when you want to share information physically with a group of people using just one file, but in a way that each person can only access their specific portion of the information.
Or, consider another example: you want to give a person a set of messages that will remain unchanged over time, but under certain circumstances, grant them access to new sections of the encrypted archive.
Sakhar can easily assist with such scenarios as it supports an unlimited number of independent encrypted spaces, the existence of which can only be discovered if you have the appropriate password or encryption key.
quickstart
create archive
open archive
details
How does it work?
To encrypt and hide files and folders, you should add them to separate Spaces, each of which will be encrypted with its password and/or a key file. You can create any number of Spaces inside a single encrypted container.
Sakhar processor then splits and mixes all data from all Spaces, injects disposable data, encrypts data chunks with appropriate credentials, and eventually scrambles the resulting container so that it becomes indistinguishable from random data.
After encryption is finished there is no way to find out the number of Spaces or the fact of their existence. You can safely disclose security credentials for multiple Spaces while keeping the most valuable of them secret. The only way to get all the encrypted data is to have all the security credentials used to create the container.
Sakhar is designed for offline use. The application does not connect to any internet servers, not even for checking updates (so if you installed the app from a source other than the App Store, make sure to manually check for the latest version from time to time). You can also block any network connections for the application in your firewall.
Options & Hints
Create archive options
⓪ Output container
⇧⌘S
Select a file where resulting container will be written.
① Noise level
⌘+ | ⌘-
Sets the relative amount of decoy data that will be injected into resulting container. Higher levels are more secure, however the size of resulting container may increase significantly.
When encrypting small files it is strongly recommended to set this value at least to 7. If you encrypt multiple Spaces with huge number of files you can set this value to 0 relatively safely.
② Number of Cores
⌃⌘+ | ⌃⌘-
Defines the number of simultaneous execution threads used for data encryption. Defaults to the half of available processor cores.
If you plan to encrypt large files and your system is not under heavy load higher values are recommended.
③ Space controls
⇧⌘A | ⇧⌘R
Using the dropdown list, you can choose any Space number.
The "Add" button adds an empty Space to the end of the list.
The "Remove" button deletes the currently selected Space. All subsequent Spaces will be renumbered, and the focus will return to the first Space.
④ Encryption password
Encryption password for the current Space. It can be of arbitrary length and include any Unicode characters (like emojis).
Short and simple passwords do not degrade the overall quality of data encryption but may pose a threat to brute-force attacks. Passwords with a minimum length of 18 characters are recommended.
⑤ Private key [optional]
Optional private encryption key for the current Space. Any file of arbitrary format can be used as such a key.
Sakhar strives to adapt even to very low-entropy data in the key; nevertheless, it is recommended to use keys consisting of truly random data, with a size of at least 24KB.
Different encryption Spaces may have identical encryption passwords and different private keys (or their absence). It is also possible to use one key with different passwords.
⑥ File controls
⌥⌘A | ⌥⌘R
The "Add" button allows you to add files and folders to the current encryption Space.
The "Remove" button deletes selected files from the current encryption Space.
⑦ Encrypt
⇧⌘P
Initiates the process of creating an encrypted container for all encryption Spaces.
Open archive options
⓪ Input container
⇧⌘O
Choose a file that will be interpreted as the encrypted Sakhar container.
① Output folder
⇧⌘S
Select a folder where the decrypted files from the container will be written.
Attention: In the current versions of Sakhar, files from different encryption Spaces will not be separated into individual folders but will be written together into the target folder.
Attention: For sandboxed application versions, you will need to create a new folder in the ~/Downloads directory to have the ability to extract files.
② Number of Cores
⌃⌘+ | ⌃⌘-
Defines the number of simultaneous execution threads used for data decoding. Defaults to the half of available processor cores.
If you plan to decrypt large files and your system is not under heavy load higher values are recommended.
③ Encryption password
Encryption password for one of the Spaces. In the current version of Sakhar, simultaneous decryption of up to three different encryption Spaces is supported.
Only the data that can be obtained using the specified password will be extracted from the container.
④ Private key [optional]
Optional private encryption key that was used for the Space along with the password.
Different encryption Spaces may have identical encryption passwords and different private keys (or their absence). It is also possible to use one key with different passwords.
⑤ Decrypt
⇧⌘P
Initiates an attempt to extract data from the container using the provided decryption credentials.