Search My Blog

Monday, April 1, 2013

Images carrying an encrypted data payload Buried under the noise floor - Steganographic Image Tool - Don's Image one


I found a really Cool Article on a Project to put Encrypted Messages in PNG Images. The Author Ian, has even built a PHP Web Page to do the work for you. You can just upload your image and message and the Site will Encrypt your Message into your Image for you. Here's some info from the site...

Bury it under the noise floor (Steganography)

2013-03-22 01:59 by Ian

Here is discussed a PHP program to hide encrypted messages and files inside of images without significantly changing the way the image looks. This is meant to be an instructional write-up to touch on some common ideas and mechanisms in cryptography.

Notable features:

  • AES-256 encrypted with optional BZ2 compression.
  • Multi-round password hashing to derive key material from passwords.
  • No predictable patterns to search for. Offset is derived from the password, and the stride between pixels is arhythmic, with a seed value derived from the password.
  • Each color is treated as a discrete channel, with messages able to span channels. This allows up to three independent messages to be overlaid on the same carrier, or one message can occupy multiple channels.
  • Option for automatic re-scaling of the carrier image to minimize waste.
  • All relevant parameters are derived from the key, or stored as discrete bits, allowing for simple decoding. Just supply a carrier image and a correct password.
  • MD5 integrity verification.
  • File storage and retrieval
  • Built-in trivial logging faculty.

Potential Uses:

  • Hiding data and messages (bitcoins / password lists / etc).
  • Watermarking intellectual property
  • Delivery of executable payloads (think: javascript/PHP + eval())

Some constraints:

  • The modulated carrier must remain as it was output. If it is scaled, re-sampled, or compressed, the data it contains will be lost forever.
  • The output format must be a lossless format (PNG, BMP, etc). Compression may be used, but only if that compression is lossless. The same holds true for conversion between lossless formats.
  • Animated GIF doesn't work.

Here are some examples of images that are well-suited for hiding data in this manner...

This image is good because it was taken with a crappy cellphone camera, and has lots of noise.

This image is good because it was converted from a lossy format and is suffering from some bad artifacts. However, it should be noted that this particular brand of noise has a certain character that can be distinguished from the flat, even noise that the program will introduce. But it would take very close scrutiny to notice.

These images are ill-suited for hiding data...

This image is bad because it was made from scratch in an image editor, and has no noise, and few colors.

This image is bad because it has large fields of pure colors.

Read More and Decrypt My Hidden Message in my Image...
http://www.joshianlindsay.com/index.php?id=126


Or you can be lazy and read the rest of this...

So, here's my first try, at it...

Don's Image one with Key. From the Conversion Page on the Site at...

http://joshianlindsay.com/stegimage/form.php 


Steganographic Image Tool

Hash set

form.php: e89c4049a3b407bbb08c79af0f4a38f907459b04a4309c53d6eaf4e7d6d74ad3
steg-img.php: 02de46279859f45b3cf9d97f4a4ecc855d2506feb81cd3b34dbd69f5bf661236
Version code: 0x01
 

Encryption key:

buddybubba2013
















My Original uploaded image...




Message (via either file or direct entry)...

My Message starts with "You have found the message in, The Face of Don. E-mail me and let me know Don@BishopCo.com".

I actually just uploaded my HTML file with the info Below...

You have found the message in, The Face of Don. E-mail me and let me know Don@BishopCo.com

Don
 

Check out my Web Pages and Blog’s too...  


Don's Home Page DonSongs

Donsongs! Download the whole abbum in MP3's! Pages of my Songs, Poems and Pic’s of me and friends:>)
www.DonSongs.com


Find us on
OURSTAGE


I need help starting a ministry for Kids. I you love Kids and Teenagers. If you feel a calling on your life to help the least of these grow up and learn to live and love and believe in Jesus, then please check out our vision.
Psalms 68 Ministries
www.Psalms68.com


DonsDeals Blog
Hi my name is Don Bishop and this is my “Deal” Today... Basically, anything that interest me. Music, Computers, Software, Apps, Linux OS's - Distros, Space, Science, Auto's, Trucks, 4x4's, Motorcycles and other slightly interesting info that I find on the Web. There may, or may not be, any correlation between my Posts. Just whatever interests me at the time. I hope someone out there finds some of this interesting too!:)
http://donsdeals.blogspot.com/


Don’s Deals at BishopCo.com my Amazon Associate Store and Free Classifieds! Check it out...
www.BishopCo.com  or http://bishopco.homeip.net/

Need a place to Put your Classified Ads for Free? Then Try my free Classified Ads Site.

Don's Deals Free Classifieds http://epage.com/js/csp/c44364/b44364/r571658/?csp=44364


DonSongs! Download the whole abbum in MP3's! This is a Collection of Songs written & Sung by Don Bishop from 01-1991 to 03-2002.

http://donsongs.blogspirit.com/

 

This Blog has some MP3 Song clips from our Living Beings - Climate Control album. Soon I will have the whole Living Beings - Climate Control Album available for download. Also, I put up some of my favorite Pic’s, which I took.  

http://livingbeings.blogspirit.com/

 

This one is my News and advertisement Blog for BishopCo.com and just anything I find Interesting.

http://donsdeals.blogspot.com/



The Site rebuilt my Image with my message in it and it showed up on the Page. Then I saved the new Image to my Hard Drive, by right clicking and doing "Save As". Then, I went back to http://joshianlindsay.com/stegimage/form.php and uploaded my New Image with the Encrypted message and it worked!:) This time, I entered my Encryption key "buddybubba2013" and then checked these two boxes. "Expose affected pixels?" and "Show class log?". I didn't enter anything in the "Message (via either file or direct entry)" Box, this time. And I got my Message Reveled on the Web Page. That's pretty cool! I like that:) I use to play around with Encrypted E-Mail Message Programs and send Encrypted E-Mails to my Friends, back in the Win98n Days. But, they grew tired of downloading and installing Apps, just to read my messages. So, that didn't last long;) I have checked out a few of the Encryption Apps of different kinds in Linux over the years too. But, never really tried them out by sending anything to anyone. Putting hidden code in images is not new. But, this little Web Page, that does the work for you. Makes is quick and easy to send Encrypted Messages, and in Images to your friends. Don't try sending anything Nasty. Like Malicious Code! That will just bring Down Big Brother on You!:O And that would be no fun. No fun At All...

Don

God Bless,

Steganographic Image Tool

Hash set

form.php: e89c4049a3b407bbb08c79af0f4a38f907459b04a4309c53d6eaf4e7d6d74ad3
steg-img.php: 02de46279859f45b3cf9d97f4a4ecc855d2506feb81cd3b34dbd69f5bf661236
Version code: 0x01
Messages:
Encryption succeeded. Image shown below is the modulated carrier.

My Image with an Encrypted Message...


Steganographic Image Tool

Hash set

form.php: e89c4049a3b407bbb08c79af0f4a38f907459b04a4309c53d6eaf4e7d6d74ad3
steg-img.php: 02de46279859f45b3cf9d97f4a4ecc855d2506feb81cd3b34dbd69f5bf661236
Version code: 0x01
 Messages:
Normally, a link to download would be present here, but it isn't because I haven't decided how to manage the security risks yet. You are free to download the source and let your web server be the guinea pig. :-)


Class log:

CODE  =+= ENTRY =============================  7      + StegImage::deriveParamsFromKey Hash:   7      + 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   6      + StegImage::deriveParamsFromKey Executed 1550 rounds in 0.0019118785858154s.  7      + StegImage::load_carrier Loaded carrier with size (250, 250).  6      + StegImage::demarcate_strides There are 8917 usable pixels.  6      + StegImage::findMaxPayloadSize Maximum message size is 3343 bytes.  7      + StegImage::demodulate Initial pixel of demodulation: (207, 0) (x, y).  7      + StegImage::decodeHeader Found a payload length of 3328 bytes.  6      + StegImage::demodulate Message passed checksum.  6      + StegImage::decrypt Compression inflated 3296 bytes into 9308 bytes.  6      + StegImage::decrypt Retrieved file name: et me know Don-BishopCo-com.html  7      + StegImage::dump_params Enabled channels (R, G, B): (1, 1, 1)  7      + StegImage::dump_params IV SIZE: 16  7      + StegImage::dump_params Offset: 194  7      + StegImage::dump_params Maximum stride: 13  7      + StegImage::dump_params Stride-seed: 9217490  

Decrypted message:

You have found the message in, The Face of Don. E-mail me and let me know Don@BishopCo.com Don  

Check out my Web Pages and Blog�s too...  

Don's Home Page DonSongs

Donsongs! Download the whole abbum in MP3's! Pages of my Songs, Poems and Pic�s of me and friends:>) www.DonSongs.com

Find us on OURSTAGE

I need help starting a ministry for Kids. I you love Kids and Teenagers. If you feel a calling on your life to help the least of these grow up and learn to live and love and believe in Jesus, then please check out our vision. Psalms 68 Ministries www.Psalms68.com

DonsDeals Blog Hi my name is Don Bishop and this is my �Deal� Today... Basically, anything that interest me. Music, Computers, Software, Apps, Linux OS's - Distros, Space, Science, Auto's, Trucks, 4x4's, Motorcycles and other slightly interesting info that I find on the Web. There may, or may not be, any correlation between my Posts. Just whatever interests me at the time. I hope someone out there finds some of this interesting too!:) http://donsdeals.blogspot.com/

Don�s Deals at BishopCo.com my Amazon Associate Store and Free Classifieds! Check it out... www.BishopCo.com  or http://bishopco.homeip.net/

Need a place to Put your Classified Ads for Free? Then Try my free Classified Ads Site.

Don's Deals Free Classifieds http://epage.com/js/csp/c44364/b44364/r571658/?csp=44364

DonSongs! Download the whole abbum in MP3's! This is a Collection of Songs written & Sung by Don Bishop from 01-1991 to 03-2002.

http://donsongs.blogspirit.com/

 

This Blog has some MP3 Song clips from our Living Beings - Climate Control album. Soon I will have the whole Living Beings - Climate Control Album available for download. Also, I put up some of my favorite Pic�s, which I took.  

http://livingbeings.blogspirit.com/

 

This one is my News and advertisement Blog for BishopCo.com and just anything I find Interesting.

http://donsdeals.blogspot.com/

If this tool has helped you, I gladly accept bitcoin. :-)
17da1aqXEhdqMkbEq66nc2n5DeAnrnNbsK


Images carrying an encrypted data payload Bury it under the noise floor (Steganography)


Images carrying an encrypted data payload
Ian's Blog: Bury it under the noise floor (Steganography)
jspark311/BuriedUnderTheNoiseFloor · GitHub
Steganographic Image Tool





No comments: