<![CDATA[Perkembangan teknologi pengelolaan dokumen digital menuntut mekanisme keamanan tingkat file yang andal untuk mencegah risiko kebocoran data akibat unauthorized access. Banyak perangkat lunak pengamanan saat ini hanya optimal dalam menangani dokumen teks statis, namun mengalami kegagalan berupa kerusakan struktur file (file corruption) saat memproses berkas multimedia berukuran besar. Penelitian ini merancang dan mengimplementasikan sistem Digital Vault universal multi-format berbasis Python dan Streamlit dengan mengintegrasikan algoritma Advanced Encryption Standard (AES-128) untuk enkripsi konten berkas dan Secure Hash Algorithm (SHA-256) untuk pengamanan kredensial serta pembentukan kunci kunci kriptografi yang presisi. Sistem ini dirancang untuk mendukung fungsionalitas multi-format, mencakup dokumen administratif (.pdf, .xls) hingga berkas multimedia (.jpg, .mp4) secara utuh (lossless). Pengujian keamanan dilakukan secara agresif melalui tiga parameter serangan nyata: pembukaan paksa (Bypass Test), kunci salah (Invalid Key Test), dan simulasi pencurian berkas keluar dari platform server (Data Exfiltration Test). Hasil pengujian membuktikan bahwa Digital Vault berhasil mempertahankan integritas data tepat 100%, kebal terhadap bypass aplikasi standar, secara akurat menolak kunci tidak sah, dan file cipherteks yang dicuri tetap mempertahankan enkapsulasi keamanannya sehingga tidak dapat dieksploitasi oleh peretas. The advancement of digital document management technology demands reliable file-level security mechanisms to prevent data leakage risks due to unauthorized access. Many current security software applications are only optimized for static text documents, yet they suffer from file corruption when processing large multimedia files. This study designs and implements a universal multi-format Digital Vault system based on Python and Streamlit, integrating the Advanced Encryption Standard (AES-128) for file content encryption and the Secure Hash Algorithm (SHA-256) for credential securing and precise cryptographic key derivation. The system is engineered to support multi-format functionalities, ranging from administrative documents (.pdf, .xls) to multimedia assets (.jpg, .mp4) with lossless integrity. Security testing was aggressively conducted through three real-world attack parameters: forced opening (Bypass Test), wrong cryptographic key submission (Invalid Key Test), and data theft simulation outside the host server platform (Data Exfiltration Test). The empirical results prove that the Digital Vault successfully maintains 100% data integrity, is fully resilient against standard application bypasses, accurately rejects unauthorized keys, and the exfiltrated ciphertext completely retains its security envelope, rendering it unexploitable to intruders.]]>
