Show HN: Simple Image encrypt/decrypt using Python

[BugsJustFindMe]

I think you should do this as a BytesIO wrapper with transparent encryption during read/write operations, not an in-memory image encryptor.

And by "I think you should do" what I mean is "IO encryption already exists so you shouldn't need to do anything" (see https://developers.google.com/tink/encrypt-large-files-or-da... for one example). But if you really like making things yourself, it would be very easy to just not use PIL and numpy and read blocks from a stream into a small R/W buffer.

1) Encryption has nothing to do with images. If you encrypt arbitrary data from the file system then you don't need PIL or numpy.

2) Right now if your decompressed image doesn't fit in RAM, then your code dies horribly.

Using the same system interfaces and same encryption without the reliance on numpy or PIL, you could accomplish the same feat but safer, faster, and more universally en/decrypting raw data from a chunked IO stream instead of treating images as special somehow. It will work against all files and will never overflow available resources. PIL can't even decode all image formats.

Leave the image decoding part to the code that actually does something with images.

[dominik-2020]

Let's hope his OS doesn't do swapping either

[uniqueuid]

Neat. I've used nacl and its python bindings in the past, which were pretty easy to use for asymmetric scenarios [1].

Is there anything particularly special about this project?

[1] https://pynacl.readthedocs.io/en/latest/public/

[pavlovskyi]

I think that there is not. It was created for specific purposes at one project when I have to be aware of store images in specific path because of security reasons. At this moment it was clearly one simple way to crypt dataset with without any information loss. (data was further used to feed neural network architecture).

[ryan-duve]

Very cool. It would be neat if you had a MWE included so we could see an actual image get encrypted and decrypted in the README. I find sections like that, sometimes titled "Quick Start", the most instructive way to learn about the functionality of a new library at a glance.

[pavlovskyi]

Yes, that is true. The entry threshold to this kind of projects without well defined Readme section becomes really high.

[metalliqaz]

Is there a use case that would make this preferable to storing images (and other data) on an encrypted disk?

[LinuxBender]

One use case would be if and end-user wanted the files encrypted in a way that the systems admin can't see the content. This is the model NextCloud uses.

[pavlovskyi]

I think that it can be used in situation when you cannot reach an encrypted disk and have to move about in closed space.

[tyingq]

Is there more context as to why something custom was desired here? Gpg, for example, can do symmetric AES256 as a "one liner". Not criticizing, just curious.

[pavlovskyi]

As I understand it properly, there was need to develop some solution with some limited technological stack.

[28194608]

It would be great if the secret_key goes through a time consuming hashing algorithm like bcrypt.

[AkshitGarg]

Or maybe argon2 as it is "memory hard"