crypton 1.0.1

CryptOn

CryptOn is an open-source tool that allows :

• Secure passwords generation based on OWASP criteria.
• Passwords strength & security checks based on OWASP Guidelines for enforcing secure passwords.
• Symmetric cryptography*
• Asymmetric cryptography*
• Hash Algorithms*

*only in interactive mode

About

Passwords

Passwords are a real security threat. Impossible-to-crack passwords are complex with multiple types of characters (numbers, letters, and symbols). So if you want to safeguard your personal info and assets, creating secure passwords is a big first step and CryptOn will help you to achieve it.

It is usual in the computer industry to specify password strength in terms of information entropy which is measured in bits and is a concept from information theory. Instead of the number of guesses needed to find the password with certainty, the base-2 logarithm of that number is given, which is the number of "entropy bits" in a password.

Cryptography

Cryptography (or crypto) is one of the more advanced topics of information security, and one whose understanding requires the most schooling and experience. It is difficult to get right because there are many approaches to encryption, each with advantages and disadvantages that need to be thoroughly understood by web solution architects and developers. In addition, serious cryptography research is typically based in advanced mathematics and number theory, providing a serious barrier to entry.

The proper and accurate implementation of cryptography is extremely critical to its efficacy. A small mistake in configuration or coding will result in removing a large degree of the protection it affords and rending the crypto implementation useless against serious attacks. A good understanding of crypto is required to be able to discern between solid products and snake oil. The inherent complexity of crypto makes it easy to fall for fantastic claims from vendors about their product. Typically, these are “a breakthrough in cryptography” or “unbreakable” or provide "military grade" security. If a vendor says "trust us, we have had experts look at this,” chances are they weren't experts!

Cryptography at its very core is math. Pure, simple, undiluted math. Math created the algorithms that are the basis for all encryption. And encryption is the basis for privacy and security on the internet. So, we love math. Even if it is a tad complicated. With that being said, algorithms have to be built to work against computers. As computers get smarter, algorithms become weaker and we must therefore look at new solutions. This is how cryptography evolves to beat the bad guys. So how is it done? First you need to build a cryptosystem that is both confidential and authentic. This cryptosystem is responsible for creating the key(s) that will be used to encrypt and then decrypt the data or message. A number of signing algorithms have been created over the years to create these keys, some of which have since been deprecated as computing power has increased.

It is commonly used in:

• SSH Authentication
• SSL Certficates
• VPN Tunnel Encryption
• Email & Messaging Encryption
• Etc

If you want more information about, try this glossaries and guides:

• cryptographic algorithms
• cryptographic protocols
• PGP in email
• New Elliptic Curve

Requirements

• python 3
• pip
• termcolor
• cryptography
• pycryptodomex
• requests
• validate_email
• py3dns

Installation

First of all, we would python 3, pip and openssl installed in our computer.

Linux

$ apt-get install python3-pip
$ apt-get install openssl

MacOS

$ brew install python3
$ brew install pip
$ brew install openssl

Windows

Download python 3 and pip from python webpage and openssl from openssl webpage.

Secondly, we install the tool using the traditional installation from pip

$ easy_install3 -U pip # you have to install python3-setuptools , update pip
$ pip3 install crypton
$ crypton # installed successfully

Usage

Run

$ crypton

Options

optional arguments:
  -h, --help            show this help message and exit
  -v, --version         See script version
  -g [length [number ...]], --generate-password [length [number ...]]
                        Secure passwords generation // Defaults: length (20) -
                        number of passwords (1)
  -c password, --check-password password
                        Passwords strength & security checks
  -i, --interactive     Run script in interactive mode

Notes

IN SOME CASES, if your password contains the special characters you may have problems when parsing. That's because of your shell. You should type \ before each special character in the password.

For macOS users maybe you need to setup these settings:

env ARCHFLAGS="-arch x86_64" 
   LDFLAGS="-L/usr/local/opt/openssl/lib" 
   CFLAGS="-I/usr/local/opt/openssl/include" 

pip install cryptography

Contributing

For bug reports or enhancements, please open an issue here.