CryptoGraph is an experimental social network that is able to deliver messages using an end-to-end encryption. It uses a mongodb(moved from Neo4j) database as its backend. The complete application is written in javascript using express on the backend.
The following libraries are used (for a complete list see package.json):
- primus.io - used to deliver messages over websockets (depending on the transformer)
- forge - the main library responsible for the encryption
- passportjs - used to authenticate the normal HTTP requests NOT used for websocket authentication
- node-jsonwebtoken - used to authenticate the websocket connection
- Twitter Bootstrap - for frontend styling and functionality
- mongodb - popular document store
CryptoGraph is still a very early alpha (mainly for test purposes). It works by performing the following steps:
- The client chooses two passwords. One is used for authentication and is known to the server. The other one is used to encrypt the private RSA key.
- Generate a RSA keypair on the client, send the public key and the (AES encrypted) private key to the server to be able to synchronize between clients.
- The key is also stored using session storage.
- The client can now send encrypted+signed messages to every user in the network.
- An additional step would be to verify the public key of other users (building up a trust chain). This could happen over a secure user2user connection(scanning a QR-Code for instance) or by asking an already trusted third party. (TODO -> not anytime soon)
WARNING: CryptoGraph is not ready for production use yet.
MIT