Reference

fuzz

• container_header.rs The .veil container header, coverage-guided.
• guard_manifest.rs The integrity manifest parser, coverage-guided.
• hybrid_keys.rs Key and encapsulation decoding, coverage-guided.
• lock_file.rs The app-lock file, coverage-guided.
• release_contents.rs The release contents list parser, coverage-guided.
• wav_chunks.rs The RIFF chunk walker in veilvoice-meta, coverage-guided.
• wav_preflight.rs The WAV pre-flight in veilvoice-audio, coverage-guided.

veilvoice-audio

Real-time capture and playback (cpal), lock-free ring buffers, virtual-cable routing and file import for VeilVoice.

• devices.rs Enumerating audio devices, and guessing which of them are virtual cables.
• io.rs Reading and writing audio files.
• lib.rs Everything between the sound hardware and veilvoice_core: device enumeration, file import and export, and the real-time capture → de-identify → playback path.
• live.rs Live microphone scrambling.
• meter.rs The scale a level meter is drawn on.
• playback.rs Playing a recording that is only in memory, and never on disk.
• record.rs Recording the veiled voice without it ever reaching unprotected memory.
• room.rs Roadmap item 147.

veilvoice-cli

Command-line interface for VeilVoice: anonymise files, scramble a microphone live, strip metadata, encrypt recordings.

• accel.rs veilvoice accel reports the graphics hardware here, and what it is good for.
• appctl.rs veilvoice appctl learns what normally runs, so it can notice what does not.
• atrest.rs Encryption at rest for the recordings VeilVoice writes, and the passphrase prompts that feed it.
• capture.rs veilvoice capture -- which screen recorders are running, and which of them you have said you meant to run.
• conversation.rs veilvoice conversation -- several speakers, a voice each, and subtitles.
• decoy.rs veilvoice decoy, and what a second passphrase is worth and what it is not.
• failsafe.rs veilvoice failsafe is the safety catch.
• guard.rs veilvoice guard -- record what VeilVoice's files should be, and check them.
• gui.rs veilvoice gui opens the desktop application from the command line.
• input.rs veilvoice input shows which running programs can see your keyboard and mouse.
• lock.rs veilvoice lock manages the application lock from the command line.
• main.rs veilvoice, the command-line interface.
• mandate.rs veilvoice mandate -- the two things VeilVoice insists on, and how to stop.
• meter.rs Level meters for veilvoice live, on a scale that means something.
• policy.rs veilvoice policy -- settings that can only be tightened.
• priv_mode.rs veilvoice privilege shows what VeilVoice runs with, and what it can see.
• record.rs veilvoice record -- capture the veiled voice straight into an encrypted file.
• sentry.rs veilvoice sentry -- canaries, baselines, and what changed since.
• theme.rs Tokyo Night colouring for the terminal.

veilvoice-conversation

Several speakers in one recording: who spoke when, a distinct voice for each, names, and subtitles.

• edit.rs Correcting a plan: who is speaking when, what they are called, and in what colour.
• lib.rs Several people in one recording: a plan of who spoke when, a distinct destination voice for each of them, and subtitles that carry their names.
• mode.rs How many voices a group gets, and the trade between the two answers.
• plan.rs Who is in the recording, and who is speaking when.
• render.rs Turning a plan and a recording into veiled audio, one engine per speaker.
• subtitles.rs Subtitles, from the same plan the audio is rendered from.

veilvoice-core

Irreversible voice de-identification DSP engine: cryptographically-modulated pitch/formant scrambling with preserved intelligibility.

• accent.rs Accent and speaker-trait neutralisation.
• chain.rs The assembled de-identification chain and its live performance statistics.
• effects.rs Light time-domain effects applied after resynthesis.
• lib.rs The security-critical heart of VeilVoice: an irreversible, cryptographically modulated voice de-identification engine.
• modulation.rs Cryptographically-seeded modulation of the effect parameters.
• pitch.rs Monophonic fundamental-frequency tracker (decimated YIN).
• spectral.rs Frequency-domain de-identification transform.
• stft.rs Streaming short-time Fourier transform with overlap-add resynthesis.
• voices.rs Destination voices: several canonical registers instead of one.
• window.rs Analysis and synthesis windowing, and the one constant that keeps overlap-add honest.
• spectrum_report.rs Where do the output partials actually land?
• veil_a_buffer.rs
• hostile_audio.rs The engine against input that is not well-behaved audio.

veilvoice-crypto

Argon2id KDF, X25519+ML-KEM-768 hybrid KEM, XChaCha20-Poly1305 at-rest encryption and page-locked amnesic secrets for VeilVoice.

• aead.rs Authenticated encryption with XChaCha20-Poly1305.
• amnesia.rs Amnesic secret storage: page-locked, zeroized, and never printed.
• container.rs The .veil encrypted container format.
• decoy.rs A second passphrase that opens a different, empty VeilVoice.
• hoard.rs The obfuscated program folder: what VeilVoice keeps on disk, under names that mean nothing and beside files that hold nothing.
• hybrid.rs Post-quantum hybrid key encapsulation: X25519 + ML-KEM-768.
• kdf.rs Password-based key derivation with Argon2id.
• lib.rs Key derivation, post-quantum-hybrid key agreement, authenticated encryption and amnesic secret storage for VeilVoice.
• lock.rs The application lock: an Argon2id password verifier with a rate limit.
• privatefile.rs Writing a file that only its owner can read.
• shred.rs Secure erasure, the self-destruct.
• studio.rs The studio vault: a key that exists only when both locks have been opened.
• tape.rs A recording held in locked, zeroizing memory while it is still being made.
• vault.rs Where the app lock is kept: two copies, unpredictable names, and a restore.
• weave.rs Thirty-one reversible encodings, chosen at random, applied around the encryption -- before it, after it, or both.
• seal_and_open.rs
• parser_fuzz.rs Randomised robustness testing for the two parsers that read untrusted input.
• timing.rs Timing measurement of the password paths.

veilvoice-guard

Integrity manifest and tamper detection for VeilVoice's own files, with best-effort attribution of what changed them.

• blame.rs Best-effort attribution: which program changed a file.
• lib.rs Tamper detection for VeilVoice's own files: a manifest of what they should be, a check of what they are, and a best-effort answer to "what changed them".
• manifest.rs The integrity manifest: what the files were, and what they are now.

veilvoice-gui

egui/eframe front-end for VeilVoice: Tokyo Night, monospace, three modes.

• app.rs The VeilVoice desktop application: seven tabs, one window, no menus.
• autolock.rs Locking the window again after a period of no use.
• avnotice.rs Noticing when antivirus software has closed VeilVoice, and saying so kindly.
• crashlog.rs Make a failure that produces no output produce some.
• crashreport.rs Offering the report from the last crash, on the run after it.
• decoys.rs Decoy vaults: how many there is room for, and the panel that offers them.
• dialog.rs Asking for a file without stopping the window.
• firstrun.rs The first run: the four things worth deciding before anything else.
• graphics.rs What the window is drawn with, asked for explicitly and then reported.
• group.rs Group mode: several people in one recording, each with a name and a colour.
• integrity.rs The integrity record, taken and checked by the window rather than by hand.
• layout.rs Centring a row of widgets, which egui does not do by nesting.
• lib.rs The VeilVoice desktop application: an egui/eframe front-end, monospace throughout: anonymise a file, scramble a microphone live, watch what is listening, manage the app lock, choose how the app looks, and an about panel that states the honest scope.
• main.rs Entry point for the desktop application: open a window, hand it to veilvoice_gui::VeilVoiceApp, and get out of the way.
• monitor.rs The live monitor: what is going in, and what is coming out, wherever you are.
• notify.rs How the application tells you something, and the three ways to be told.
• pace.rs How often the window draws while something in it is moving, and what that actually came to.
• palettes.rs User-defined colour schemes, and the contrast check that keeps them usable.
• paths.rs Exactly where this copy of VeilVoice is keeping things.
• policy.rs The policy in force, and what the interface does about it.
• prefs.rs What the user has chosen about how the app looks and moves.
• reduced_motion.rs Whether the operating system has been asked to reduce motion.
• security.rs The application lock, and the at-rest encryption of what VeilVoice writes.
• settings.rs The settings panel: a menu of pages, each a titled group of choices.
• setup.rs The setup tab: install this copy, undo that, and the optional companions.
• soundbar.rs The animated mark: a row of bars that rise and fall.
• storage.rs Where veiled recordings are written, and the encrypted volume that may hold them.
• studio.rs The Recording Studio and the Recording Browser.
• theme.rs Colour schemes for the desktop app.
• tour.rs The short tour on a first run, and after an upgrade.
• updates.rs The manual update check, as the window shows it.
• vault_store.rs Where the desktop application keeps its own files, and what the app lock buys for them.
• verify.rs The verify tab: drop a download on the window and be told what it is.
• watchfeed.rs The device monitor, moved off the thread that paints.
• window.rs How big the window opens, and why it is not a constant.

veilvoice-meta

Strip or spoof identifying metadata: audio tags, and image EXIF/GPS.

• audio.rs Audio tag removal and replacement.
• image.rs Image EXIF/GPS removal.
• lib.rs Strip or spoof the identifying metadata that rides along with media files.
• wav.rs Chunk-level RIFF/WAVE metadata removal.
• wav_fuzz.rs Randomised robustness testing for the RIFF chunk walker.

veilvoice-policy

Settings that can only be tightened, sealed with the project's own post-quantum cryptography.

• lib.rs Settings somebody else decided, sealed so they cannot be edited without a passphrase, and, more importantly, built so that editing them without one buys nothing worth having.
• mandate.rs The two things VeilVoice insists on unless you say otherwise.
• policy.rs The policy itself: what can be required, and what requiring it does.
• workspace.rs Named profiles and saved projects.

veilvoice-setup

Per-user installation and companion-software detection, shared by the command line and the desktop app.

• companions.rs Optional third-party software, detected rather than assumed.
• install.rs Put this program somewhere the system can find it.
• lib.rs Everything that puts VeilVoice on a machine, and everything that reports what is already on it.
• space.rs How much room is actually free where VeilVoice keeps things.
• update.rs Ask, only when told to, whether a newer VeilVoice release exists.
• volumes.rs Encrypted volumes this machine already has: Cryptomator and VeraCrypt.

veilvoice-verify

Verify a VeilVoice release without GnuPG installed

• builder.rs Build VeilVoice here, and compare what came out against what was published.
• deps.rs What this machine needs before it can build VeilVoice, and who ships it.
• discover.rs Finding a release to check, without being told where it is.
• extracted.rs What came out of the archive, and the GnuPG somebody already has.
• fetch.rs Download a release, without putting an HTTP client in the dependency graph.
• lib.rs The portable verifier: check a VeilVoice release without GnuPG installed.
• report.rs How much this program says, and what it returns when it says nothing.
• tests.rs The verifier's own tests.
• release_manifest.rs Roadmap item 97.

veilvoice-video

A watchable version of a veiled conversation: a waveform, a circle per speaker, subtitles, and an honest account of what needs ffmpeg.

• accel.rs What hardware this machine has, and the one place VeilVoice can use it.
• ffmpeg.rs The video file, which needs a codec this project does not ship.
• font.rs A monospace face, five pixels by seven, drawn here.
• frames.rs The video's pictures, and how many of them there really are.
• lib.rs A watchable version of a veiled conversation: the waveform, a circle per speaker, the title, the subtitles, and a background.
• page.rs The picture: one still for a preview, and one page that plays.
• palette.rs Colours: the site's own tokens, and one per speaker.
• raster.rs Pixels, and a PNG to put them in.
• size.rs The size and frame rate a video is rendered at.
• waveform.rs The shape of the audio, reduced to something a page can draw.

veilvoice-watch

Detect which applications are currently using the microphone and camera, with alerts on change.

• appctl.rs Learn what normally runs on this machine, then notice what does not.
• input.rs What on this machine could be watching the keyboard and the mouse.
• lib.rs Find out which applications are using your microphone and camera, right now.
• linux.rs Linux detection, via open file handles in /proc.
• privilege.rs What privilege VeilVoice is running with, and what each level can actually see.
• proc.rs Which processes are running, per platform, and what that cannot tell you.
• windows.rs Windows detection, via the Capability Access Manager.
• scan_once.rs Print what is using the microphone and camera right now.