490 lines
22 KiB
HTML
490 lines
22 KiB
HTML
{% extends "base.html" %}
|
|
|
|
{% block title %}Generate Credentials - Stegasoo{% endblock %}
|
|
|
|
{% block content %}
|
|
<div class="row justify-content-center">
|
|
<div class="col-lg-8">
|
|
<div class="card">
|
|
<div class="card-header">
|
|
<h5 class="mb-0"><i class="bi bi-key-fill me-2"></i>Generate Credentials</h5>
|
|
</div>
|
|
<div class="card-body">
|
|
{% if not generated %}
|
|
<!-- Generation Form -->
|
|
<form method="POST">
|
|
<div class="mb-4">
|
|
<label class="form-label">Words per Phrase</label>
|
|
<input type="range" class="form-range" name="words_per_phrase"
|
|
min="3" max="12" value="3" id="wordsRange">
|
|
<div class="d-flex justify-content-between small text-muted">
|
|
<span>3 (33 bits)</span>
|
|
<span id="wordsValue" class="text-primary fw-bold">3 words (~33 bits)</span>
|
|
<span>12 (132 bits)</span>
|
|
</div>
|
|
</div>
|
|
|
|
<hr>
|
|
|
|
<h6 class="text-muted mb-3">SECURITY FACTORS <span class="text-warning small">(select at least one)</span></h6>
|
|
|
|
<div class="row">
|
|
<div class="col-md-6 mb-3">
|
|
<div class="form-check form-switch">
|
|
<input class="form-check-input" type="checkbox" name="use_pin"
|
|
id="usePinCheck" checked>
|
|
<label class="form-check-label" for="usePinCheck">
|
|
<i class="bi bi-123 me-1"></i> Generate PIN
|
|
</label>
|
|
</div>
|
|
<div class="mt-2" id="pinOptions">
|
|
<label class="form-label small">PIN Length</label>
|
|
<select name="pin_length" class="form-select form-select-sm">
|
|
<option value="6" selected>6 digits (~20 bits)</option>
|
|
<option value="7">7 digits (~23 bits)</option>
|
|
<option value="8">8 digits (~26 bits)</option>
|
|
<option value="9">9 digits (~30 bits)</option>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="col-md-6 mb-3">
|
|
<div class="form-check form-switch">
|
|
<input class="form-check-input" type="checkbox" name="use_rsa"
|
|
id="useRsaCheck">
|
|
<label class="form-check-label" for="useRsaCheck">
|
|
<i class="bi bi-file-earmark-lock me-1"></i> Generate RSA Key
|
|
</label>
|
|
</div>
|
|
<div class="mt-2 d-none" id="rsaOptions">
|
|
<label class="form-label small">Key Size</label>
|
|
<select name="rsa_bits" class="form-select form-select-sm">
|
|
<option value="2048" selected>2048 bits (~128 bits entropy)</option>
|
|
<option value="3072">3072 bits (~128 bits entropy)</option>
|
|
<option value="4096">4096 bits (~128 bits entropy)</option>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<button type="submit" class="btn btn-primary btn-lg w-100 mt-3">
|
|
<i class="bi bi-shuffle me-2"></i>Generate Credentials
|
|
</button>
|
|
</form>
|
|
|
|
{% else %}
|
|
<!-- Generated Credentials Display -->
|
|
<div class="alert alert-warning">
|
|
<i class="bi bi-exclamation-triangle me-2"></i>
|
|
<strong>Memorize these credentials!</strong> They will not be shown again.
|
|
<br><small>Do not screenshot or save to an unencrypted file.</small>
|
|
</div>
|
|
|
|
{% if pin %}
|
|
<div class="mb-4">
|
|
<h6 class="text-muted"><i class="bi bi-123 me-2"></i>STATIC PIN</h6>
|
|
<div class="text-center">
|
|
<div class="pin-container d-inline-block">
|
|
<div class="pin-digits-row" id="pinDigits">
|
|
{% for digit in pin %}
|
|
<span class="pin-digit-box">{{ digit }}</span>
|
|
{% endfor %}
|
|
</div>
|
|
<div class="pin-buttons mt-3">
|
|
<button type="button" class="btn btn-sm btn-outline-secondary me-2" onclick="togglePinVisibility()">
|
|
<i class="bi bi-eye-slash" id="pinToggleIcon"></i>
|
|
<span id="pinToggleText">Hide</span>
|
|
</button>
|
|
<button type="button" class="btn btn-sm btn-outline-secondary" onclick="copyPin()">
|
|
<i class="bi bi-clipboard" id="pinCopyIcon"></i>
|
|
<span id="pinCopyText">Copy</span>
|
|
</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
|
|
<div class="mb-4">
|
|
<h6 class="text-muted"><i class="bi bi-chat-quote me-2"></i>DAILY PHRASES</h6>
|
|
<div class="table-responsive">
|
|
<table class="table table-dark table-striped mb-0">
|
|
<tbody>
|
|
{% for day in days %}
|
|
<tr>
|
|
<td class="text-muted" style="width: 100px;">{{ day }}</td>
|
|
<td>
|
|
<span class="font-monospace phrase-display" id="phrase{{ loop.index }}">{{ phrases[day] }}</span>
|
|
</td>
|
|
</tr>
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<div class="text-end mt-2">
|
|
<button class="btn btn-sm btn-outline-secondary" onclick="toggleAllPhrases()">
|
|
<i class="bi bi-eye-slash me-1"></i>Toggle Visibility
|
|
</button>
|
|
</div>
|
|
</div>
|
|
|
|
{% if rsa_key_pem %}
|
|
<div class="mb-4">
|
|
<h6 class="text-muted"><i class="bi bi-file-earmark-lock me-2"></i>RSA PRIVATE KEY ({{ rsa_bits }} bits)</h6>
|
|
|
|
<ul class="nav nav-tabs" role="tablist">
|
|
<li class="nav-item" role="presentation">
|
|
<button class="nav-link active" data-bs-toggle="tab" data-bs-target="#keyTextTab" type="button">
|
|
<i class="bi bi-file-text me-1"></i>PEM Text
|
|
</button>
|
|
</li>
|
|
<li class="nav-item" role="presentation">
|
|
<button class="nav-link" data-bs-toggle="tab" data-bs-target="#keyDownloadTab" type="button">
|
|
<i class="bi bi-download me-1"></i>Download
|
|
</button>
|
|
</li>
|
|
{% if has_qrcode and qr_token %}
|
|
<li class="nav-item" role="presentation">
|
|
<button class="nav-link" data-bs-toggle="tab" data-bs-target="#keyQrTab" type="button">
|
|
<i class="bi bi-qr-code me-1"></i>QR Code
|
|
</button>
|
|
</li>
|
|
{% endif %}
|
|
</ul>
|
|
|
|
<div class="tab-content border border-top-0 rounded-bottom p-3 bg-dark">
|
|
<!-- PEM Text Tab -->
|
|
<div class="tab-pane fade show active" id="keyTextTab" role="tabpanel">
|
|
<pre class="bg-black p-2 rounded small mb-2" style="max-height: 200px; overflow-y: auto;"><code id="rsaKeyDisplay">{{ rsa_key_pem }}</code></pre>
|
|
<button class="btn btn-sm btn-outline-light"
|
|
onclick="navigator.clipboard.writeText(document.getElementById('rsaKeyDisplay').textContent)">
|
|
<i class="bi bi-clipboard me-1"></i>Copy to Clipboard
|
|
</button>
|
|
</div>
|
|
|
|
<!-- Download Tab -->
|
|
<div class="tab-pane fade" id="keyDownloadTab" role="tabpanel">
|
|
<form action="{{ url_for('download_key') }}" method="POST" class="row g-2 align-items-end">
|
|
<input type="hidden" name="key_pem" value="{{ rsa_key_pem }}">
|
|
<div class="col-md-8">
|
|
<label class="form-label small">Password to encrypt the key file</label>
|
|
<input type="password" name="key_password" class="form-control"
|
|
placeholder="Min 8 characters" minlength="8" required>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<button type="submit" class="btn btn-primary w-100">
|
|
<i class="bi bi-download me-1"></i>Download .pem
|
|
</button>
|
|
</div>
|
|
</form>
|
|
<div class="form-text mt-2">
|
|
The downloaded file will be password-protected (AES-256 encrypted).
|
|
</div>
|
|
</div>
|
|
|
|
{% if has_qrcode and qr_token %}
|
|
<!-- QR Code Tab -->
|
|
<div class="tab-pane fade" id="keyQrTab" role="tabpanel">
|
|
<div class="text-center">
|
|
<p class="small text-muted mb-3">
|
|
Scan this QR code to transfer the RSA key to another device.
|
|
<br><strong>Warning:</strong> This is the unencrypted private key!
|
|
</p>
|
|
<div class="qr-container d-inline-block p-3 bg-white rounded mb-3">
|
|
<img src="{{ url_for('generate_qr', token=qr_token) }}"
|
|
alt="RSA Key QR Code"
|
|
class="img-fluid"
|
|
style="max-width: 300px;"
|
|
id="qrCodeImage">
|
|
</div>
|
|
<div>
|
|
<a href="{{ url_for('generate_qr_download', token=qr_token) }}"
|
|
class="btn btn-outline-primary">
|
|
<i class="bi bi-download me-1"></i>Download QR Code
|
|
</a>
|
|
<button class="btn btn-outline-secondary ms-2" onclick="printQrCode()">
|
|
<i class="bi bi-printer me-1"></i>Print
|
|
</button>
|
|
</div>
|
|
<div class="alert alert-warning small mt-3 mb-0 text-start">
|
|
<i class="bi bi-shield-exclamation me-1"></i>
|
|
<strong>Security note:</strong> The QR code contains your unencrypted private key.
|
|
Only scan in a secure environment. Consider using the password-protected download instead.
|
|
{% if rsa_bits >= 4096 %}
|
|
<br><br>
|
|
<i class="bi bi-exclamation-triangle me-1"></i>
|
|
<strong>4096-bit keys</strong> produce very dense QR codes. If scanning fails,
|
|
use the PEM text or download options instead.
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
|
|
<div class="mb-4">
|
|
<h6 class="text-muted"><i class="bi bi-shield-check me-2"></i>SECURITY SUMMARY</h6>
|
|
<div class="row text-center">
|
|
<div class="col">
|
|
<div class="p-2 bg-dark rounded">
|
|
<div class="small text-muted">Phrase</div>
|
|
<div class="fs-5 text-info">{{ phrase_entropy }} bits</div>
|
|
</div>
|
|
</div>
|
|
{% if pin_entropy %}
|
|
<div class="col">
|
|
<div class="p-2 bg-dark rounded">
|
|
<div class="small text-muted">PIN</div>
|
|
<div class="fs-5 text-warning">{{ pin_entropy }} bits</div>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
{% if rsa_entropy %}
|
|
<div class="col">
|
|
<div class="p-2 bg-dark rounded">
|
|
<div class="small text-muted">RSA</div>
|
|
<div class="fs-5 text-primary">{{ rsa_entropy }} bits</div>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
<div class="col">
|
|
<div class="p-2 bg-dark rounded">
|
|
<div class="small text-muted">Total</div>
|
|
<div class="fs-5 text-success">{{ total_entropy }} bits</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="form-text text-center mt-2">
|
|
+ reference photo entropy (~80-256 bits)
|
|
</div>
|
|
</div>
|
|
|
|
<div class="d-grid gap-2">
|
|
<a href="{{ url_for('generate') }}" class="btn btn-outline-primary">
|
|
<i class="bi bi-arrow-repeat me-2"></i>Generate New Credentials
|
|
</a>
|
|
<a href="{{ url_for('encode_page') }}" class="btn btn-success">
|
|
<i class="bi bi-lock me-2"></i>Start Encoding
|
|
</a>
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
|
|
{% if not generated %}
|
|
<div class="card mt-4">
|
|
<div class="card-body">
|
|
<h6 class="text-muted mb-3"><i class="bi bi-info-circle me-2"></i>About Credentials</h6>
|
|
<ul class="small text-muted mb-0">
|
|
<li class="mb-2">
|
|
<strong>Daily phrases</strong> rotate each day of the week for forward secrecy
|
|
</li>
|
|
<li class="mb-2">
|
|
<strong>PIN</strong> is static and adds another factor both parties must know
|
|
</li>
|
|
<li class="mb-2">
|
|
<strong>RSA key</strong> adds asymmetric cryptography for additional security
|
|
</li>
|
|
<li class="mb-0">
|
|
You need <strong>at least one</strong> of PIN or RSA key (or both)
|
|
</li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
|
|
<style>
|
|
.pin-container {
|
|
background: linear-gradient(145deg, #1e1e2e 0%, #2d2d44 100%);
|
|
border: 1px solid #ffc107;
|
|
border-radius: 16px;
|
|
padding: 1.5rem 2rem;
|
|
box-shadow: 0 4px 20px rgba(0, 0, 0, 0.3), 0 0 40px rgba(255, 193, 7, 0.1);
|
|
}
|
|
|
|
.pin-digits-row {
|
|
display: flex;
|
|
justify-content: center;
|
|
gap: 0.5rem;
|
|
}
|
|
|
|
.pin-digit-box {
|
|
display: inline-flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
width: 3rem;
|
|
height: 3.5rem;
|
|
background: rgba(0, 0, 0, 0.4);
|
|
border: 1px solid rgba(255, 193, 7, 0.3);
|
|
border-radius: 8px;
|
|
font-family: 'Consolas', 'Monaco', monospace;
|
|
font-size: 1.75rem;
|
|
font-weight: bold;
|
|
color: #ffc107;
|
|
text-shadow: 0 0 10px rgba(255, 193, 7, 0.5);
|
|
transition: filter 0.3s ease, transform 0.2s ease;
|
|
}
|
|
|
|
.pin-digit-box:hover {
|
|
transform: translateY(-2px);
|
|
border-color: rgba(255, 193, 7, 0.6);
|
|
}
|
|
|
|
.pin-digits-row.blurred .pin-digit-box {
|
|
filter: blur(8px);
|
|
user-select: none;
|
|
}
|
|
|
|
.pin-buttons .btn {
|
|
min-width: 80px;
|
|
}
|
|
|
|
/* Responsive */
|
|
@media (max-width: 576px) {
|
|
.pin-container {
|
|
padding: 1rem 1.25rem;
|
|
}
|
|
|
|
.pin-digit-box {
|
|
width: 2.25rem;
|
|
height: 2.75rem;
|
|
font-size: 1.25rem;
|
|
}
|
|
|
|
.pin-digits-row {
|
|
gap: 0.35rem;
|
|
}
|
|
}
|
|
</style>
|
|
{% endblock %}
|
|
|
|
{% block scripts %}
|
|
<script>
|
|
// Words range slider
|
|
const wordsRange = document.getElementById('wordsRange');
|
|
const wordsValue = document.getElementById('wordsValue');
|
|
|
|
if (wordsRange) {
|
|
wordsRange.addEventListener('input', function() {
|
|
const bits = this.value * 11;
|
|
wordsValue.textContent = `${this.value} words (~${bits} bits)`;
|
|
});
|
|
}
|
|
|
|
// Toggle PIN/RSA options
|
|
const usePinCheck = document.getElementById('usePinCheck');
|
|
const useRsaCheck = document.getElementById('useRsaCheck');
|
|
const pinOptions = document.getElementById('pinOptions');
|
|
const rsaOptions = document.getElementById('rsaOptions');
|
|
|
|
if (usePinCheck) {
|
|
usePinCheck.addEventListener('change', function() {
|
|
pinOptions.classList.toggle('d-none', !this.checked);
|
|
});
|
|
}
|
|
|
|
if (useRsaCheck) {
|
|
useRsaCheck.addEventListener('change', function() {
|
|
rsaOptions.classList.toggle('d-none', !this.checked);
|
|
});
|
|
}
|
|
|
|
// PIN visibility toggle
|
|
let pinHidden = false;
|
|
function togglePinVisibility() {
|
|
const pinDigits = document.getElementById('pinDigits');
|
|
const icon = document.getElementById('pinToggleIcon');
|
|
const text = document.getElementById('pinToggleText');
|
|
|
|
pinHidden = !pinHidden;
|
|
|
|
if (pinHidden) {
|
|
pinDigits.classList.add('blurred');
|
|
icon.className = 'bi bi-eye';
|
|
text.textContent = 'Show';
|
|
} else {
|
|
pinDigits.classList.remove('blurred');
|
|
icon.className = 'bi bi-eye-slash';
|
|
text.textContent = 'Hide';
|
|
}
|
|
}
|
|
|
|
// Copy PIN
|
|
function copyPin() {
|
|
const pin = '{{ pin|default("", true) }}';
|
|
const icon = document.getElementById('pinCopyIcon');
|
|
const text = document.getElementById('pinCopyText');
|
|
|
|
navigator.clipboard.writeText(pin).then(() => {
|
|
icon.className = 'bi bi-check';
|
|
text.textContent = 'Copied!';
|
|
setTimeout(() => {
|
|
icon.className = 'bi bi-clipboard';
|
|
text.textContent = 'Copy';
|
|
}, 2000);
|
|
});
|
|
}
|
|
|
|
// Toggle all phrases visibility
|
|
let phrasesHidden = false;
|
|
function toggleAllPhrases() {
|
|
phrasesHidden = !phrasesHidden;
|
|
document.querySelectorAll('.phrase-display').forEach(el => {
|
|
el.style.filter = phrasesHidden ? 'blur(8px)' : 'none';
|
|
});
|
|
}
|
|
|
|
// Print QR code
|
|
function printQrCode() {
|
|
const qrImg = document.getElementById('qrCodeImage');
|
|
if (!qrImg) return;
|
|
|
|
const printWindow = window.open('', '_blank');
|
|
printWindow.document.write(`
|
|
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<title>Stegasoo RSA Key QR Code</title>
|
|
<style>
|
|
body {
|
|
display: flex;
|
|
flex-direction: column;
|
|
align-items: center;
|
|
justify-content: center;
|
|
min-height: 100vh;
|
|
margin: 0;
|
|
font-family: sans-serif;
|
|
}
|
|
img { max-width: 400px; }
|
|
.warning {
|
|
margin-top: 20px;
|
|
padding: 10px;
|
|
border: 2px solid #ff9800;
|
|
background: #fff3e0;
|
|
max-width: 400px;
|
|
text-align: center;
|
|
font-size: 12px;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<h2>Stegasoo RSA Private Key</h2>
|
|
<img src="${qrImg.src}" alt="RSA Key QR Code">
|
|
<div class="warning">
|
|
<strong>⚠️ SECURITY WARNING</strong><br>
|
|
This QR code contains your unencrypted RSA private key.<br>
|
|
Store securely and destroy after use.
|
|
</div>
|
|
<script>window.onload = function() { window.print(); }<\/script>
|
|
</body>
|
|
</html>
|
|
`);
|
|
printWindow.document.close();
|
|
}
|
|
</script>
|
|
{% endblock %}
|