{% extends "base.html" %} {% block title %}About - Stegasoo{% endblock %} {% block content %}
About Stegasoo

Stegasoo is a hybrid steganography system that hides encrypted messages inside ordinary images. It combines multiple security layers to create a system that is both highly secure and practical to use.

System Status
{% if has_argon2 %}
Argon2id Available
Memory-hard key derivation (256MB)
{% else %}
Using PBKDF2 Fallback
Install argon2-cffi for better security
{% endif %}
AES-256-GCM
Authenticated encryption enabled
Security Model
Component Entropy Purpose
Reference Photo ~80-256 bits Something you have (plausible deniability)
3-Word Phrase ~33 bits Something you know (changes daily)
6-Digit PIN ~20 bits Something you know (static)
Date N/A Automatic key rotation
Combined 133+ bits Beyond brute force
Attack Resistance
What Attackers Can't Do
  • Brute force the passphrase (2133 combinations)
  • Use rainbow tables (random salt per message)
  • Detect hidden data (random pixel selection)
  • Use GPU farms (Argon2 requires 256MB RAM per attempt)
Real Threats
  • Social engineering (someone tricks you)
  • Physical access to your devices
  • Malware/keyloggers on your system
  • Shoulder surfing while you type
Best Practices
Do
  • Memorize your phrases and PIN, never write them down
  • Use a reference photo that both parties already have
  • Use different carrier images for each message
  • Share stego images through normal channels (looks innocent)
Don't
  • Don't transmit the reference photo
  • Don't reuse the same carrier image
  • Don't store phrases or PIN digitally
  • Don't resize or recompress stego images
{% endblock %}