https://github.com/freedomofpress/securedrop-protocol-server-resty

OpenResty implementation of the experimental SecureDrop-ng server protocol
https://github.com/freedomofpress/securedrop-protocol-server-resty

Last synced: 7 days ago
JSON representation

OpenResty implementation of the experimental SecureDrop-ng server protocol

• Host: GitHub
• URL: https://github.com/freedomofpress/securedrop-protocol-server-resty
• Owner: freedomofpress
• License: agpl-3.0
• Created: 2023-10-29T15:30:56.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2024-05-04T10:42:20.000Z (6 months ago)
• Last Synced: 2024-05-06T22:24:34.750Z (6 months ago)
• Language: Lua
• Size: 23.4 KB
• Stars: 0
• Watchers: 4
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
## SecureDrop Protocol in OpenResty

Quick toy implementation of the SecureDrop server described in the [SecureDrop Protocol](https://github.com/freedomofpress/securedrop-protocol) repository. It depends only on `cjson` and `luasodium`. It is quite fast, but does not support attachments and does lack mitigations (decoy messages, time). It is intended to show how portable is a server implementation and do some more realistic benchmark of how much it can scale.

## Usage

 - Install `luasodium` using LuaRocks

 - Copy the module in a Lua path or edit the nginx config to load it

 - Use the reference nginx config in this repo

 - Generate the required keys using SecureDrop POC `pki.py`

 - Load the root (FPF) and intermediate (Newsroom) key using `deploy_keys.py`

 - Test using the `demo.sh` script in the other repo (remember to change commons.SERVER)