🔐 SecureCrypt – Secure File Vault

A production-quality cybersecurity web application built with Python Flask.

Features

• AES-256-CBC file encryption/decryption (PBKDF2 key derivation)
• RSA-2048/4096 key generation, text encryption, text decryption
• Hash Generator – MD5, SHA-1, SHA-256, SHA-512
• Password Security – bcrypt hashing, strength meter, secure generator
• Digital Signature – RSA-PSS sign & verify
• File Integrity Checker – SHA-256 tamper detection
• Encryption History – SQLite audit trail with search
• Reports – PDF (ReportLab) and CSV export
• Modern dark glassmorphism UI with responsive sidebar

Quick Start

cd SecureCrypt
python -m venv venv
# Windows:
venv\Scripts\activate
# macOS/Linux:
source venv/bin/activate

pip install -r requirements.txt
python app.py

Open: http://127.0.0.1:5000

Project Structure

SecureCrypt/
├── app.py              # Flask entry point
├── config.py           # Configuration
├── database.py         # SQLite helpers
├── requirements.txt
├── routes/
│   ├── dashboard.py
│   ├── aes_routes.py
│   ├── rsa_routes.py
│   └── other_routes.py
├── services/
│   ├── aes_service.py
│   ├── rsa_service.py
│   ├── hash_service.py
│   ├── password_service.py
│   └── report_service.py
├── templates/          # Jinja2 HTML templates
├── static/
│   ├── css/style.css
│   └── js/main.js
└── uploads/ encrypted/ decrypted/ keys/ reports/

Security Design

• AES-256-CBC with PBKDF2-HMAC-SHA256 (310K iterations) per NIST SP 800-132
• RSA-OAEP-SHA256 for asymmetric encryption
• RSA-PSS-SHA256 for digital signatures
• bcrypt (work factor 12) for password storage
• Path traversal prevention via werkzeug.utils.secure_filename
• Input validation on all endpoints
• No plaintext passwords stored anywhere