Skip to content
View shibme's full-sized avatar
26 followers · 0 following

Achievements

Achievement: YOLOAchievement: StarstruckAchievement: Pull SharkAchievement: Arctic Code Vault Contributor

Achievements

Achievement: YOLOAchievement: StarstruckAchievement: Pull SharkAchievement: Arctic Code Vault Contributor

Highlights

Organizations

@amagimedia @bugaudit @savesecrets

Block or report shibme

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
shibme/README.md

Shibly Meeran

shib.me

I lead Platform Engineering at Amagi, where I own the shared identity, infrastructure and AI layer that every internal product runs on. Before this I ran security engineering there.

Most of what I build is plumbing. The useful parts end up here.

Projects

Xipher encrypts data for someone who has published nothing but a password-derived key. Your password is the private key, so there is no key file to lose. Hybrid X25519 with ML-KEM-1024, Argon2id and XChaCha20-Poly1305, shipped as a CLI, a Go library, a WASM build and a browser app.

SLV holds secrets you can git commit on purpose. They stay in the repository beside the code they belong to, and there is no secret store to run. Presented at Black Hat Arsenal twice, in Asia 2024 and Europe 2025.

Encrypting something to me

shib.me publishes a Xipher key, so you need nothing from me first:

xipher encrypt text --fetch -k shib.me

There is a browser version at xipher.org/?xk=shib.me if you would rather not install anything.

LinkedIn

Pinned Loading

  1. xipher xipher Public

    Xipher is a collection of cryptographic primitives for key/password-based asymmetric encryption, with optional post-quantum security. It lets you share encrypted data between parties over insecure …

    Go 16

  2. amagioss/slv amagioss/slv Public

    Securely store, share, and access secrets alongside the codebase.

    Go 78 7

  3. secrets-action secrets-action Public

    Write secrets to your GitHub organization, repository or environments from the workflow

    JavaScript 1

  4. randgen randgen Public

    RandGen is a simple CLI tool to generate data (files/streams) of a given size.

    Go 2

  5. steward steward Public

    Sync issues from any source to issue tracking systems

    Java

  6. bugaudit/bugaudit bugaudit/bugaudit Public

    BugAudit runner built with all environmental dependencies bundled inside a docker image

    Shell