freedomofpress/securedrop
Securedrop
SecureDrop is an integrated software suite designed for anonymous whistleblowing and encrypted document leaks. It provides a platform for the secure transfer of sensitive files and a communication portal for two-way encrypted messaging between organizations and anonymous sources.
The system ensures identity protection by integrating onion routing to mask network locations and using asymmetric cryptography for secure communication. It incorporates a metadata-stripping pipeline to remove identifying information from uploaded files before they are reviewed.
For data handling, the platform utilizes air-gapped document decryption and review suites, allowing sensitive materials to be analyzed on hardware physically disconnected from the internet. Additional security measures include multi-factor authentication for staff and utilities for generating high-entropy passphrases.
Features
- Leak Platforms - Provides a complete system for the secure transfer of sensitive files via asymmetric cryptography and metadata stripping.
- Document Metadata Stripping - Automatically removes identifying information and system headers from uploaded documents to maintain source anonymity.
- Air-Gapped Data Review Environments - Provides hardware-isolated environments for decrypting and analyzing sensitive documents without network connectivity.
- Onion Routing - Hides the physical location and identity of communicating parties by routing traffic through multiple encrypted nodes.
- Journalist Communication Portals - Provides an authenticated interface for managing ongoing encrypted correspondence with anonymous sources.
- Source Coordination Messaging - Enables encrypted communication with anonymous contributors to coordinate the delivery of sensitive information.
- Asymmetric Encryption - Uses public-private key pairs to secure two-way communication between anonymous sources and recipients.
- Anonymous Submission Systems - Allows users to upload files or messages without collecting personal information to protect source identity.
- Whistleblowing Platforms - Provides a secure environment for anonymous reporting and two-way encrypted communication between journalists and sources.
- Tor-Based Submission Platforms - Leverages Tor to protect the anonymity of sources submitting sensitive documents to organizations.
- Multi-Factor Authentication - Implements security processes requiring multiple forms of verification for staff to access the submission management system.
- Ephemeral Session Managers - Enforces temporary, non-persistent user sessions to minimize the digital footprint of sensitive interactions.
- Communication and Collaboration - Whistleblower submission system for media organizations.
- Example Applications - Whistleblower submission system.
- Open Source Projects - Secure whistleblower submission system for media organizations.
