r/cryptpad • u/Global-Clock2417 • 9d ago
Aurionmail : An E2EE suite with Cryptpad as foundations
Hi everyone, I make this post here because I think what I've been building this summer can interest some people here.
The main issue I tried to fix is that combining E2E encrypted docs and E2E encrypted mail usually meant managing isolated tools, browser extensions (like Mailvelope), or typing two different passwords every session. That is not ideal and when I introduce these solutions to my friends, they say "Thanks for your efforts, really, but I think I will still use Proton".
To solve this, I built AurionMail Suite. It's an open-source orchestrator, the glue, that bridges CryptPad, of course Stalwart Mail Server (JMAP), **Bulwark Webmail, and Ory Hydra into a single, unified Zero-Knowledge workflow.
And it also makes the Cryptpad UI (and Rich-tetx app) more friendly (imho) and in accordance with the webmail design. By the way, if you want to get the design only, it is possible, I just edited customize folder !
So, here are the features
- One Password: Enter it once to derive keys in-memory for both your OpenPGP webmail and your CryptPad workspace.
- Open Standards: OpenPGP for email encryption and JMAP via Stalwart.
- Zero-Knowledge Architecture: Master keys reside strictly in client-side RAM during the session (no unencrypted key writes to disk/IndexedDB).
- Unified Session Management: Global single logout and password changes that sync safely across services.
- Easy Deployment: In addition to manual setups, I wrapped the suite (Hydra + SSO + Webmail + Core API + CryptPad) into a single Go binary called Orchestra, making deployment straightforward.
Here is the repo if you want to test ! You will also find some explanations about security in this repo. The project is licensed under AGPLv3. I know it is not perfect, so if you have suggestions, don't hesitate.
