Industrial Track · Binary Distribution

menu-bar-vpn-binaryWireGuard in your menu bar. Tor when you need it.

Protected macOS VPN artifact — encrypted payload, symbol-stripped binary, Homebrew tap. Server, client, and onion routing without exposing source.

Install via HomebrewVerify SHA-256Preview Paper
Version
1.0.1
Distribution
ML-KEM-768 Hybrid
Protocol
WireGuard + Tor

Snazzy on the surface. Industrial underneath.

Single-seat macOS VPN with operator-grade CLI, menu bar control, and a binary-only distribution channel — no source compile, no datacenter dependency.

WireGuard Server + Client

Menu bar resident VPN — provision peers, import configs, auto-assigned tunnel IPs.

Tor Onion + Anonymize

Hidden service .onion endpoints and SOCKS egress for location privacy.

Binary-Only Channel

ML-KEM-768 hybrid sealed artifacts. No Swift source ships to operators.

CLI + Menu Bar

Headless commands for server/client/tor or full GUI from the status item.

Tunnel plane, jazzed up.


   [Menu Bar UI]  <-->  +----------------------+
   [CLI headless]       |   VPNCoordinator     |
                        |  WireGuard + NAT     |
                        +----------+-----------+
                                   |
              +--------------------+--------------------+
              | server mode        | client mode        | tor mode
              v                    v                    v
        [Peer provisioning]  [Tunnel connect]    [.onion + SOCKS]
              |                    |                    |
              v                    v                    v
        [wg0 interface]      [Auto IP assign]     [TorManager]
              |
        [Network Extension / userspace backend]

WireGuard handles the data plane. Auto-assigned tunnel IPs remove manual addressing. Tor integration adds hidden-service endpoints and anonymized egress when enabled.

Install in three beats.

Homebrew tap → trust → install. Encrypted binary-only payload.

brew tap shyamalschandra/tap
brew trust --formula shyamalschandra/tap/menu-bar-vpn-binary
brew install menu-bar-vpn-binary wireguard-tools tor
Launch with open "$(brew --prefix menu-bar-vpn-binary)/MenuBarVPN.app", or use the CLI: menu-bar-vpn server start / menu-bar-vpn client connect / menu-bar-vpn tor start.

Protected release integrity.

Only encrypted binaries and Homebrew tap metadata are published here. The rest of the repository — Swift source, build scripts, and internal tooling — stays private.

Encrypted Binary

Artifact
menu-bar-vpn-1.0.1-arm64.enc
Architecture
arm64
Size
451 KB
Encryption
ML-KEM-768 + AES-256-CBC
Artifact SHA-256
b1694a575f5c15a4111b485951660de58e8c5791d393a7f1294b23369af78921
Binary SHA-256
baf430a10188edb89accfaf5cec13aad54125e4c8561a85fbcd874ae3f4350c0
Download .encmanifest.json

Public Homebrew Files

Homebrew downloads the encrypted artifact from GitHub Pages, verifies SHA-256, decapsulates with ML-KEM-768 (OpenSSL), AES-decrypts the payload, and places menu-bar-vpn plus MenuBarVPN.app.

Industrial paper preview.

IEEE-style industrial-track design paper for menu-bar-vpn-binary. Download or read inline below.

Open PDFDownload PDFEncrypted Binary