Show HN: Air-gapped file encryption as self-decrypting HTML page

Hacker News Top Tools
file-encryption html air-gapped self-decrypting openpgp auditing open-source

Summary

A tool that enables air-gapped file encryption by creating self-decrypting HTML pages, requiring no installation and using OpenPGP for security auditing.

Air-gapped file encryption packed into a single, self-decrypting HTML page. Repo: <a href="https:&#x2F;&#x2F;github.com&#x2F;ApelegHQ&#x2F;ts-cms-ep-sfx" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ApelegHQ&#x2F;ts-cms-ep-sfx</a><p>I was inspired by self-extracting archives. I wanted to share files with basically no dependencies. The goal was:<p><pre><code> 1. Something that didn&#x27;t require any installation (assuming a web browser) 2. Have a single file with no network that could self-decrypt 3. Be fully auditable </code></pre> The second point is done by having (sort of(*)) reproducible builds and embedded OpenPGP signatures.<p>The first point is made by cleverly manipulating the HTML structure so that it can decrypt without breaking the PGP signature. It can even decrypt using bare openssl (which was a design goal too, though getting the exact structure right took some work and bug reports).<p>The third point is accomplished by the first two, and by the source being freely available.<p>(*) Depends on the OS at the moment.
Original Article

Similar Articles

@geekbb: Burn after reading. Send an encrypted text that self-destructs after one view — the server itself cannot see the content. A zero-knowledge encrypted Pastebin that uses the Web Crypto API for AES-256-GCM encryption in the frontend; only ciphertext is uploaded, the key stays in the URL's # fragment and is never sent to the server.

X AI KOLs Timeline

binthere is a zero-knowledge, end-to-end encrypted pastebin that self-destructs after one read. It uses AES-256-GCM encryption in the browser, stores only ciphertext on Cloudflare Workers, and includes a CLI client.