IPFS Storage

Overview

SESHAT can backup your bundles to IPFS/Filecoin via nft.storage. Data is AES-256-GCM encrypted before upload, ensuring your code remains private.

Configuration

ENABLE_IPFS=true
NFT_STORAGE_TOKEN=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

Get your free token at nft.storage.

Encryption

Your data is encrypted before upload:

ETH_PRIVATE_KEY
    | HKDF(salt="seshat-ipfs-encryption-v1")
AES-256-GCM Key
    |
Encrypted Bundle -> IPFS

Why Encrypt?

IPFS is public by default. Anyone with the CID can download content. Encryption ensures:

Only you can decrypt (with ETH key)
Code remains confidential
IPFS provides availability, not privacy

IPFS_PROOF.json

When enabled, bundles include:

{
  "version": "1.0.0",
  "timestamp": "2026-01-16T12:00:00Z",
  "ipfs": {
    "cid": "bafybeigdyrzt5sfp7udm7hu76uh7y26nf3efuylqabf3oclgtqy55fbzdi",
    "gateway_url": "https://nftstorage.link/ipfs/bafybei...",
    "size_bytes": 524288
  },
  "encryption": {
    "algorithm": "AES-256-GCM",
    "iv": "base64...",
    "key_derivation": {
      "function": "HKDF-SHA256",
      "salt": "seshat-ipfs-encryption-v1",
      "info": "aes-256-gcm"
    }
  },
  "content_hash": "sha512:abc123..."
}

Decryption

Pour decrypter un backup, utilisez l’utilitaire CLI :

seshat ipfs-decrypt --cid bafybei... --output ./restored-bundle.zip

Le decryptage utilise votre ETH_PRIVATE_KEY configure pour deriver la cle AES.

Benefits

Feature	Description
Redundancy	Filecoin provides long-term storage
Availability	Content-addressed, globally accessible
Integrity	CID = hash of content
Privacy	AES-256-GCM encryption

Storage Limits

nft.storage free tier:

5GB total storage
Unlimited retrievals
Filecoin deals for persistence