Archive
/
cryptpng
mirror of https://github.com/Trivernis/cryptpng.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
A go program to store encrypted data inside png chunks.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
14 Commits
2 Branches
1 Tag
49 KiB
Go 100%
 
master
develop
v1.0
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'e0c508fb3c'
${ noResults }
Go to file
trivernis e0c508fb3c Change `make([]byte, 0)` to type annotation 5 years ago
.gitignore Add usage to README 5 years ago
LICENSE Create LICENSE 5 years ago
README.md Update README 5 years ago
cryptpng.go Change storing of the data to use multiple chunks 5 years ago
go.mod Add masked password input and hash 5 years ago
go.sum Add masked password input and hash 5 years ago
pngUtils.go Change `make([]byte, 0)` to type annotation 5 years ago

README.md

Cryptpng

A proof of concept implementation of storing encrypted data inside of png metadata chunks.

Usage

# encrypt
cryptpng --image <name of the image> --in <input file> --out <output file>

# decrypt
cryptpng --decrypt --image <crypt image> --out <decrypted output file>

Technical Information

It should be possible to store data with a size up to ~ 4GB, but in reality most image viewers have problems with chunks that are bigger than several Megabytes. The data itself is stored in a png chunk and encrypted via aes. The encryption chunk is stored right before the IDAT chunk that contains the image data. The steps for encrypting are:

Encrypt

  1. Parse the png file and split it into chunks.
  2. Prompt for a password and use the sha512 32byte value.
  3. Create a base64 string out of the data.
  4. Encrypt the base64 string using aes and the provided hashed key.
  5. Store the data into the crPt chunk.
  6. Write the png header and chunks to the output file.

Decrypt

  1. Parse the png file and split it into chunks.
  2. Get the crPt chunk.
  3. Prompt for the password and create the sha512 32byte hash.
  4. Decrypt the data using aes and the provided hash key.
  5. Decode the base64 data.
  6. Write the data to the specified output file.