robinmoisson/staticrypt
Staticrypt
Staticrypt is a tool for securing static HTML files using AES-256 encryption. It provides a command-line interface to encrypt and decrypt web pages, transforming plain HTML into encrypted payloads that are decrypted directly in the browser without the need for a backend server or database.
The project distinguishes itself through access management features such as auto-decrypting links, which use hashed passwords in URL fragments to unlock files for specific recipients. It also supports browser session persistence, storing hashed passwords in local storage to prevent repeated authentication.
The utility covers a broad range of capabilities, including password-based key derivation and the ability to customize the styling and behavior of the password prompt interface. It also includes management for encryption salts to ensure consistent decryption across deployments.
Features
- HTML Payload Encryption - Transforms plain HTML into encrypted payloads that remain opaque until decrypted by the client runtime.
- Static Web Page Encryption - Provides AES-256 encryption for static HTML files that are decrypted directly in the web browser.
- HTML File Decryption - Restores original content from protected files by reversing AES-256 encryption via the CLI.
- Password-Based Encryption - Secures static HTML files using symmetric keys derived from user passwords.
- Encryption CLI Utilities - Provides a command line interface for encrypting and decrypting HTML files using AES-256.
- Client-Side Decryption - Implements AES-256 decryption of HTML content directly in the browser using the Web Crypto API.
- Password Access Restrictions - Wraps HTML content in an encrypted shell that requires a password to unlock.
- Key Derivation Functions - Derives unique cryptographic keys from user passwords and salts to secure static files.
- Password-Protected Static Sites - Enables the creation of private website areas that require authentication without needing a backend server.
- URL-Fragment Key Distribution - Uses URL fragments to pass hashed credentials for automatic, server-blind decryption of pages.
- Encrypted Static Content Generators - Encrypts static HTML files using AES-256 to create password-protected web pages.
- Access Link Generators - Generates shareable links with embedded hashed passwords for automatic content decryption.
- Encrypted File Sharing - Facilitates sharing encrypted documents via URLs containing hashes for automatic decryption.
- Browser Session Persistence - Stores hashed passwords in browser local storage to maintain authentication state across page refreshes.
- Browser Session Management - Persists hashed passwords in the browser to automatically decrypt pages on return visits.
- UI Prompt Injections - Injects a customizable password prompt interface into the browser document before rendering protected content.
