Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/w4/hidden-note
:closed_lock_with_key: Client-side encrypted/decrypted self-destructing notes using AES-256-CBC.
https://github.com/w4/hidden-note
aes destructing-notes note pycrypto secure
Last synced: about 1 month ago
JSON representation
:closed_lock_with_key: Client-side encrypted/decrypted self-destructing notes using AES-256-CBC.
- Host: GitHub
- URL: https://github.com/w4/hidden-note
- Owner: w4
- License: gpl-3.0
- Created: 2016-06-16T16:46:54.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2018-09-18T12:20:21.000Z (over 6 years ago)
- Last Synced: 2024-10-09T04:41:14.442Z (2 months ago)
- Topics: aes, destructing-notes, note, pycrypto, secure
- Language: CSS
- Homepage:
- Size: 2.41 MB
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# HiddenNote
Client-side decrypted self destructing notes. Falls backs to client side encryption and decryption if specifically allowed by the user, obviously decreasing security by a huge amount due to plain data traveling over the wire.
Uses Python 3 on the backend for handling retriving and caching ciphertext in the Redis data store—also handles encryption and decryption for non-js clients.
All JavaScript is written in ES6 then transpiled down by Babel, we use [crypto-js](https://github.com/brix/crypto-js) for encryption and decryption on the client side and [pycrypto](https://pypi.python.org/pypi/pycrypto) at the server side. The [Web Crypto API](https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API) is used to generate a key and a nonce for the paste.
All HiddenNote user data is encrypted using AES-256-CBC. If both ends have JavaScript enabled, the server will never know the keys. On first access to the note, it will be removed from our datastore—this is by design for OPSEC reasons.
On the frontend we're using [Foundation](http://foundation.zurb.com/) as the framework and indentation syntax SASS for styling.