Kerlok Wants to Make S3 Storage Blind

Why it surfaced

Kerlok builds its pitch around a sharp constraint: even a subpoena, compromised administrator, or root-level server access should yield only unreadable fragments. The page pairs that unusual threat model with concrete implementation details—X25519, ML-KEM-768, AES-256-GCM, reproducible builds, provable deletion, and zero egress fees—while inviting early-access requests.

A European S3-compatible object-storage service that says data is encrypted before it reaches its servers.