BenedictENGINEERING / CASE STUDY
ZeroSight Protocol
Cryptographic backend engineering around PIN-based AES encryption, unique salts, no stored plaintext PIN and recovery mechanisms.
Protecting sensitive material
The backend design uses PIN-based AES encryption with unique salts and no stored plaintext PIN. Recovery mechanisms include dual OTP; this is not described as a mandatory second factor for every unlock.
The security boundary
A short PIN has limited entropy. Salts do not make a weak secret strong. Key derivation, authenticated encryption, rate limits, recovery authorization and key lifecycle all matter to the surrounding system.
Review scope
No formal security audit or proof is claimed. Cipher mode, key-derivation parameters and confidential recovery implementation are not published here. AES is a primitive, not proof of an end-to-end security property.