UmayCrypto

umay-crypto is a Python library for AES-256-GCM encryption with Argon2id key derivation, Orhun (Old Turkic) rune encoding, an interactive function security decorator, and in-memory execution of encrypted Python scripts.

Installation

pip install umay-crypto

Quick Start

Basic Encryption & Decryption

import umay_crypto

# Encrypt data
ciphertext = umay_crypto.encrypt("Sensitive payload", password="SecretPassword123")
print("Encrypted:", ciphertext)

# Decrypt data
plaintext_bytes = umay_crypto.decrypt(ciphertext, password="SecretPassword123")
print("Decrypted:", plaintext_bytes.decode("utf-8"))

Function Security Decorator (@protect)

Prompt for passwords interactively before executing critical functions:

import umay_crypto

token = umay_crypto.encrypt("OK", password="SecretPassword123")

@umay_crypto.protect(encrypted_token=token, prompt="Password: ")
def wipe_database():
    print("Database cleared.")

wipe_database()

In-Memory Encrypted Script Execution

Encrypt Python source files and execute them directly in memory without writing decrypted code to disk:

import umay_crypto

# Encrypt script to a .umay payload
umay_crypto.encrypt_python_file("app.py", "app.umay", password="SecretPassword123")

# Execute .umay payload directly in RAM
umay_crypto.run_encrypted_file("app.umay", password="SecretPassword123")

Technical Details

• Encryption: AES-256-GCM (Authenticated Encryption with Associated Data).
• Key Derivation: Argon2id KDF with OWASP-compliant memory and iteration settings.
• Encoding: Permuted Orhun (Old Turkic) rune mapping derived deterministically per key.
• Execution: RAM-only dynamic execution via exec() for encrypted files.

License

MIT License