Home/Projects/OneBurn
(06) Security Microservice2025Open Source Utility

OneBurn

Burn-After-Read Secret Sharing API

RoleBackend Architect
Timeline2024 — 2025
OrganizationOpen Source Utility
Actions
(THE PROBLEM & CONTEXT)

Background & Architectural Intent

End-to-end encrypted secret transmission service where payload decrypts exactly once before permanent atomic purge in Redis.

OneBurn gives developers a dead-simple, zero-trust way to share API keys, credentials, and passwords. Messages are client-side encrypted with AES-256-GCM before transit; once accessed, the key is atomically shredded from memory with zero server logging.

(CAPABILITIES & SIGNALS)

Core Engineering Highlights

01

Client-side AES-256-GCM encryption

02

Atomic Redis DEL with zero residual cache

03

Configurable expiration TTLs

04

Passphrase protection and brute-force ratelimiting

(TECHNOLOGICAL MATRIX)

Technologies & Frameworks

Node.jsExpress.jsRedisCrypto Subtle API
Next Project Dossier (01)

KPollZone →

Election Analytics & Trends Tracker

KPollZone