6
Nifty local webserver ultity to convert a image to base64 then encrypt with AES-256 GCM
(infosec.pub)
This application is a local only web instance that can be spun up in termux.
Here is the source code.
Its configured to be a local only service utility although it wouldn't take much to point this to the web.
After picking a image, you can configure the compression. I found large image files basically require the compression. There is a limit to how much text you can copy...its very large...but the higher quality the image the longer this string of text will be, so you may need to lower the quality if you run into problems.
You can either copy the text directly, or download a blob as the .txt file for transport.
Termux side server manager.
Encrypted blob example.
I think misconceptions about base64 are surprisingly common. Both the misconception that it adds security (people confusing it with an encryption algorithm) and the misconception that it reduces size (like compression does).
HTTP Basic auth, for instance, uses base64, and I think people see that and think it's for security. I guess it kinda is in that it's a pretty weak mitigation against shoulder surfing. But people see that and think base64 is encryption. I've unironically heard coworkers use the term "base64 encryption", which always makes me wince.
And I've definitely corrected coworkers in the past who thought that base64 would just magically make binary data smaller. It does make binary data smaller than base16 encoding does (while still letting you put binary data in places not meant for binary data -- URLs, for instance). Maybe that's part of where people's misconception about base64 reducing sizes comes from?
Who knows. Who knows.
Edit: Oh! You're the author. I didn't catch that until after I typed up this reply since you aren't the OP for this thread.
I'm definitely in that category of misconception where I would assume adding extra bits of information before encryption may help the strength of the encryption somehow but it really doesn't at all I guess.
Yeah I don't know who the poster is, but the original is posted on the lemmy.ml instance. I think it's a bot maybe attempting to federate non federated content or something? I don't really understand how it ends up on the programming.dev instance.