I couldn’t find a local Post-Quantum file encryption tool, so I built my own. Looking for feedback. Any thought on this ?

I recently encountered a need for post-quantum cryptography (PQC) tools to safeguard my local files from potential "harvest now, decrypt later" attacks. Unfortunately, I was unable to locate a dedicated standalone tool that met my specific threat model. In response to this, I decided to create my own solution from scratch.

My primary concerns revolve around two issues: first, I am not comfortable with cloud backup providers like Google Drive or Microsoft OneDrive storing unencrypted data. My files need to be thoroughly secured locally before ever being transmitted to the cloud. Second, when sharing sensitive files across platforms owned by major tech companies - who are currently investing heavily in quantum research - I want absolute assurance that these entities cannot simply extract the data and subject it to brute-force attacks in the future.

To address these concerns, I developed a zero-trust, local GUI vault. This vault combines widely-used symmetric ciphers such as AES-256-GCM and XChaCha20-Poly with quantum-resistant key encapsulation mechanisms (KEMs) like Cypherpunk Max and X-wing. Additionally, I incorporated a duress password feature. If invoked under duress, it permanently eradicates the vault's encryption key, rendering all data inaccessible.

While there are several other tools available, such as Veracrypt and Picocrypt, neither of them provides dedicated PQC support. I have chosen to share the source code of my project on GitHub (github.com/ABiswasDev/Ombracrypt) in order to solicit professional feedback and scrutiny. I am eager to hear your thoughts on the overall architecture, suggestions for potential improvements, and any insights into how I might potentially break it myself.