SecureGen v2.0.0

SecureGen v2.0.0

Major security and feature release.

🔐 Security

• AES-256-GCM transport — all web communications now encrypted with AES-256-GCM (replaces XOR)
• PIN-encrypted device key — master key protected by PIN + PBKDF2-HMAC-SHA256 at rest
• Persistent PIN lockout — failed attempt counter survives reboots; locks after 5 total attempts
• Secure memory wipe before deep sleep — keys, secrets, and session data zeroed from RAM
• PBKDF2 iterations increased to 25,000

🔑 TOTP / HOTP

• HOTP support — counter-based codes, works offline without time sync
• SHA1 / SHA256 / SHA512, 6 and 8 digit codes, 30s / 60s periods
• QR code import — add keys by scanning QR from camera or file
• QR code export — display any key as QR on device screen and web interface

🌐 Web Interface

• Password generator in web cabinet
• Fixed import/export system
• Reduced ESP32 ↔ browser request count — improved performance

⚡ Hardware

• Fixed crashes on battery power when pressing buttons
• QR code for WiFi in AP mode — scan to connect instantly
• Captive portal in AP mode and WiFi setup flow

🛠 Tools

• decrypt_export.html — offline browser tool for decrypting backups, editing keys and passwords

---

Flashing

Browser (easiest): flash.securegen.dev — one click, no software needed

esptool:

esptool.py --chip esp32 --port /dev/ttyUSB0 --baud 921600 \
  write_flash \
  0x1000 bootloader.bin \
  0x8000 partitions.bin \
  0x10000 firmware.bin

Or use the single merged binary:

esptool.py --port /dev/ttyUSB0 write_flash 0x0 merged-firmware.bin