openssl-encrypt 0.3.1

A package for secure file encryption and decryption based on modern ciphers

Secure File Encryption Tool

A powerful tool for securely encrypting, decrypting, and shredding files with military-grade cryptography and multi-layer password hashing.

History

The project is historically named openssl-encrypt because it once was a python script wrapper around openssl. But that did not work anymore with recent python versions. Therefore I decided to do a complete rewrite in pure python also using modern cipher and hashes. So the projectname is a "homage" to the root of all :-)

Important note: although whirlpool is supported by this tool, I do not recommend using this hashing algorithm. That is because building whirlpool via pip fails on recent Python versions (>= Python 3.12). If you want to use it you should have a look at pyenv which allows multiple Python versions to exist in peaceful co-existence. whirlpool will remain in the code also in future versions of this application

Issues

you can create issues by sending mail to the linked address

Features

• Strong Encryption: Uses Fernet symmetric encryption (AES-128-CBC) as default with secure key derivation. Also supports AES-GCM, AES-SIV, CAMLELIA and POLY1305-CHACHA20 as ecnryption algorithm
• Multi-hash Password Protection: Optional layered hashing with SHA-256, SHA-512, SHA3-256, SHA3-512 and Whirlpool they all can be chained with different rounds to create key-stretching
• Multi-KDF Password Protection: Optional layered KFD with PBKDF2, Scrypt, Argon2 and Ballon they all can be chained with different rounds to create key-stretching and very strong brute-force prevention
• Password Management: Password confirmation to prevent typos, random password generation, and standalone password generator
• File Integrity Verification: Built-in hash verification to detect corrupted or tampered files
• Secure File Shredding: Military-grade secure deletion with multi-pass overwriting
• Directory Support: Recursive processing of directories
• Memory-Secure Processing: Protection against memory-based attacks and data leakage
• Glob Pattern Support: Batch operations using wildcard patterns
• Safe Overwriting: Secure in-place file replacement with atomic operations
• Progress Visualization: Real-time progress bars for lengthy operations
• Graphical User Interface: User-friendly GUI for all operations (beta)
• Built-in and custom Templates: built in templates like --quick --standard and --paranoid can be used. You can also define your own customized templates in /templates

Files Included

• crypt.py - Main command-line utility
• crypt_gui.py - Graphical user interface
• modules/crypt.cli.py - command-line interface
• modules/crypt_core.py - provides the core functionality
• modules/crypt_utils.py - provides utility functions
• modules/secure_memory.py - provides functions for secure memory handling
• requirements.txt - Required Python packages
• README.md - This documentation file
• docs/install.md - installation notes
• docs/usage.md - usage notes
• docs/examples.md - some examples
• docs/password-handling.md - notes about password handling
• docs/security-notes.md - notes about security
• unittests/unittests.py - Unit tests for the utility
• unittests/test_gui.py - simple test for tkinter
• unittests/testfiles - testfiles for unittests encryption

all testfile files are ecrypted with password 1234 for your testing

License

MIT License