October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk5 min

ATLOCK v5 Self-Test: What Held Up—and Why Sender Pinning Needed a Fix

ATLOCK’s developer reported strong corruption-test results but also found sender pinning could warn and still decrypt. Here is what the self-test establishes—and what it does not.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ATLOCK’s self-test reports successful rejection of corrupted files and malformed inputs, but its original sender-pinning behavior exposed a more consequential weakness: a mismatched or missing sender identity could trigger a warning while decryption still proceeded. The developer later said the behavior was changed to fail closed unless the user explicitly overrides it. Those are the developer’s own test results and account—not an independent security audit—and the v5 release and reported fix are not verified here.

What the ATLOCK v5 test does—and does not—show

In a DEV Community post published October 1, 2026, Akhouri Anmol Kumar described testing the author’s own encryption software on Linux. The post said ATLOCK v4 was public and v5 was built but unreleased at that time. Its test results should be read as self-reported outcomes, not as independently reproduced benchmarks or a security assessment. Read the author’s post and discussion on DEV Community.

As an Amazon Associate I earn from qualifying purchases.

The post describes an extensive set of checks for file corruption, malformed inputs, and expected cryptographic operations. Passing those checks is useful evidence about the cases exercised; it does not establish that the software is secure against every attack, that its implementation matches the article’s descriptions, or that its Windows-specific behavior works as intended.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the author says was tested

Integrity and malformed-input checks

Kumar reported that all 33 built-in checks passed. In additional tests, the author says 200 random single-bit flips were rejected, with zero silent corruptions and zero unexpected crashes; five truncation points were rejected; and a wrong password raised AtlockAuthError. The reported fuzzing covered 300 container mutations, 100 garbage recovery shares, and 60 junk imports, with no crashes or silent corruption observed.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

These are bounded test outcomes. They do not establish resistance to attacks that were not attempted, and the post does not provide independently verified test methodology or replication. In particular, corruption detection and authentication-policy enforcement are different questions: a file can be rejected when altered while a user-interface warning about who sent it can still be handled unsafely.

Public-key sharing and recovery

For the public-key file-sharing flow, Kumar reported that Bob could decrypt Alice’s file and verify its signature, while Alice could not open a file encrypted for Bob. A changed byte was rejected, and an edited signed file failed signature verification. For the described 3-of-5 recovery scheme, the author says each of the ten possible three-share combinations rebuilt the key and that two shares were refused. These outcomes are likewise author-reported, not independent validation of the cryptography or implementation.

Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

The sender-pinning issue is the important finding

Sender pinning is meant to let a recipient check that a signed file came from the sender whose public key they expect. In the original behavior described by Kumar, supplying a mismatched expected_sender_pub produced signed: true and signer_matches: false, but the file still decrypted. The application warned: “The app shows WARNING: this is NOT the sender key you pasted!, but it does not stop.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The author initially characterized continuing after a mismatch as a design choice. In the discussion, Kumar then reported finding that an unsigned file could also decrypt when a sender was pinned. The author says the behavior was changed so a mismatch or unsigned sender fails closed with a dedicated exception, with an explicit override required to decrypt anyway.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

That distinction matters: a warning is not enforcement. If a user supplies an expected sender identity, the natural security expectation is that the application will block decryption when the file is unsigned or the signer does not match, unless the user deliberately chooses otherwise. The reported change addresses that expectation, but the available account does not verify that the fix is present in a publicly inspectable v5 release.

Reported performance figures, with their limits

Kumar reported the following timings and container size in the 2026 post. They are the author’s results; the post’s figures are not independently benchmarked here, and the available account does not establish repeatability across hardware or files.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Operation or setting Author-reported result
Seal a 5 MB file 0.77 seconds
Open a 5 MB file 0.63 seconds
Container overhead 134 bytes
Argon2id, 64 MiB and t=3 0.16 seconds
Argon2id, 128 MiB and t=4 0.45 seconds
ATLOCK v4 PBKDF2-SHA256, 200,000 iterations 0.05 seconds

The Argon2id timings show a trade-off in the tested settings: the higher-memory, higher-work-factor configuration took longer in the author’s run. They do not, on their own, establish an appropriate password-hardening configuration for every user or device.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How v4 and v5 are described

The post’s comparison presents a substantial redesign, but these are the author’s descriptions rather than independently inspected implementation facts. The release status below is the status stated in the October 1, 2026 post, not a claim about availability today.

Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Version Post’s description Publication-time status in the post
ATLOCK v4 3,074 lines and 23 classes; Fernet (AES-128-CBC plus HMAC) and PBKDF2-SHA256 at 200,000 iterations Described as public
ATLOCK v5 8,432 lines and 55 classes; chunked AES-256-GCM, Argon2id, X25519 and Ed25519 public-key file sharing, Shamir 3-of-5 recovery, TOTP, FIDO2 hardware keys, and a built-in self-test Described as built but unreleased

The size of a codebase or the number of features is not a security rating. A larger feature set also creates more behavior to test, so the reported self-test and the untested areas need to be considered together.

Important parts of the suite were outside the test

The author said testing was done on Linux, although ATLOCK is Windows-first. The post says the following were not tested:

  • The graphical interface and Windows Hello
  • DPAPI behavior and BitLocker checks
  • Camera or intruder capture and the startup watchdog
  • FIDO2 using a real hardware key

The post also relays a project-documentation warning: “A pure-Python tool cannot stop an attacker who is already running code as you, and secure-delete can’t be guaranteed on SSDs.” That is a meaningful boundary for any local security tool: successful file tests do not protect a device already controlled by an attacker, and deleting a file through software cannot guarantee that every underlying copy has been erased from solid-state storage.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the static scan flagged

Kumar reported that Bandit found one high-severity item involving SHA-1 in a Have I Been Pwned password-check flow and three medium urlopen findings. The author said only the first five hash characters are sent to the password-check API and described the SHA-1 use as intentional, while also noting that URL schemes should be pinned in the final release. This is the author’s account of the findings and response; it is not an independent review of the code or its network behavior.

What a careful reader should conclude

  • The reported corruption and fuzz tests are encouraging for the specific inputs tested, but they are not proof of comprehensive security.
  • The most instructive issue is the original sender-pinning behavior: warning about an identity mismatch while still decrypting can undermine the purpose of pinning.
  • The author says that issue was changed to fail closed with an explicit override, but the fix and current v5 release status are not verified by the available sources.
  • Several Windows-focused functions and real FIDO2 hardware use were outside the reported test scope.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.