@kurolabs/stegcloak
StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide text in plain sight - with key features like encryption and top-notch text compression. It can be used in social media or for any other covert communicat
Last updated 25 days ago by mohanpierce99 .
MIT · Repository · Bugs · Original npm · Tarball · package.json
$ cnpm install @kurolabs/stegcloak 
SYNC missed versions from official npm registry.


stegcloak

StegCloak

The Cloak of Invisibility for your texts

StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide text in plain sight - with key features like encryption and top-notch text compression. It can be used in social media or for any other covert communication.

JavaScript Standard Style

Features

  • Cryptographically secure by encrypting the invisible secret
  • Compression to reduce the payload
  • Completely invisble, uses Zero Width Characters instead of white spaces or tabs
  • Additional HMAC integrity
  • Usage - Available as an API module, a CLI and also a Web interface(Optimized with Web workers). Works everywhere!
  • Super fast ! Hides the wikipedia page-source for steganography (800 lines and 2,05,362 characters) in covertext of 3 words under one second
  • Written in pure functional style

Installing

Using npm,

$ npm install -g stegcloak

Using npm (to use it locally in your program),

$ npm install stegcloak

How it works

CLI Usage

Hide

 stegcloak hide        # The tool automatically prompts for the inputs

Options:

  hide [options] [secret] [cover]

  -f, --file <file>       Extract input from file
  -n, --nocrypt           If you don't need encryption (default: false)
  -i, --integrity         If additional security of preventing tampering is needed (default: false)
  -o, --output <output>   Extract results to output file
  -h, --help              display help for command

Reveal

stegcloak reveal       

Options:

  reveal [data]

  -f, --file <file>       Extract input from file
  -cp, --clip             Copy Data directly from clipboard
  -o, --output <output>   Output file that secret will be extracted to
  -h, --help              display help for command

API Usage

const StegCloak = require('stegcloak');

const stegcloak = new StegCloak(true, false);  // Initializes with encryption true and hmac false for hiding

// Parameters don't impact the reveal(), stegcloak automatically decrypts when given the correct password

// Can be changed later by switching boolean flags for stegcloak.encrypt and stegcloak.integrity

What's HMAC and do I need it?

HMAC is an additional fingerprint security step taken towards tampering of texts and to verify if the message received was actually sent by the intended sender. If the data is sent through WhatsApp, Messenger or any social media platform, this is already taken care of! However, if you are using stegcloak in your program to safely transmit and retrieve, this option can be enabled and stegcloak takes care of it.

Hide

stegcloak.hide(secret,password,cover) -> string
const magic = stegcloak.hide("Voldemort is back", "mischief managed", "The WiFi's not working here!");

// Uses stegcloak.encrypt and stegcloak.integrity booleans for obfuscation

console.log(magic);  // The WiFi's not working here!

Reveal

stegcloak.reveal(data, password) -> string
const secret = stegcloak.reveal(magic, "mischief managed");

console.log(secret); // Voldemort is back

Resources and Citations

The following papers were referred to for insights and understanding of using Zero width characters in stegnography. Ideas from these papers were implemented to build stegcloak.

  • Aman, Muhammad & Khan, Aihab & Ahmad, Basheer & Kouser, Saeeda. (2017). A HYBRID TEXT STEGANOGRAPHY APPROACH UTILIZING UNICODE SPACE CHARACTERS AND ZERO-WIDTH CHARACTER. International Journal on Information Technologies & Security. 9.

  • Taleby Ahvanooey, Milad & Li, Qianmu & Hou, Jun & Dana Mazraeh, Hassan & Zhang, Jing. (2018). AITSteg: An Innovative Text Steganography Technique for Hidden Transmission of Text Message via Social Media. IEEE Access. 2018. 65981-65995. 10.1109/ACCESS.2018.2866063.

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

License

MIT - Copyright (c) 2020 Jyothishmathi CV, Kandavel A, Mohanasundar M

Current Tags

  • 0.1.0                                ...           latest (25 days ago)

1 Versions

  • 0.1.0                                ...           25 days ago
Maintainers (1)
Downloads
Today 0
This Week 1
This Month 10
Last Day 1
Last Week 0
Last Month 0
Dependencies (16)
Dev Dependencies (9)
Dependents (0)
None

Copyright 2014 - 2016 © taobao.org |