Hacker GitHub

← All repos

robinmoisson/staticrypt

View on GitHub ↗ ★ 8,065 HTML

Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.

17 mentions on Hacker News by 10 people: 2 stories, 15 comments · first 2017-06-14 · latest 2026-06-20

Mentions per year 17 mentions · busiest year 2023 (10)
20082026
  1. https://github.com/robinmoisson/staticrypt and other worse ways
  2. …of PBKDF2 iterations and password length over here, if you feel like diving into that rabbit hole: https://github.com/robinmoisson/staticrypt/issues/159
  3. …me listing your project in the Community and Alternatives[1] section of the StatiCrypt readme? [1] https://github.com/robinmoisson/staticrypt#community-and-alt...
  4. …Do you mind if I list in the Community and Alternatives[1] section of the StatiCrypt readme? [1] https://github.com/robinmoisson/staticrypt#community-and-alt...
  5. …ok with me featuring it in the Community and Alternatives[1] section of the StatiCrypt readme? [1] https://github.com/robinmoisson/staticrypt#community-and-alt...
  6. ▲ 141
    Password protect a static HTML page, decrypted in-browser in JavaScript
    story by olestr · 2024-08-30 · 46 comments
  7. …to the "Alternatives to StatiCrypt"[1] section of the Readme years ago when I discovered it :) [1] https://github.com/robinmoisson/staticrypt#alternatives-to-s...
    comment by yoble · 2023-02-19 · in Password protect a static HTML page
  8. …of StatiCrypt. If you have more thoughts on this I'd love to hear them. Relevant comment here: https://github.com/robinmoisson/staticrypt/issues/19#issueco...
    comment by yoble · 2023-02-19 · in Password protect a static HTML page
  9. …I'm not a cryptographer - any feedback to make the tool better or more secure is very welcome! [1] https://github.com/robinmoisson/staticrypt/issues/19#issueco... [2] https://github.com/robinmoisson/staticrypt#is-it-secure
    comment by yoble · 2023-02-19 · in Password protect a static HTML page
  10. https://github.com/robinmoisson/staticrypt#encrypting-multip... > This allows encrypting multiple page on a single domain with the same password This might still work for you if putting everything on one page isn't a requirement. Using the…
    comment by lalopalota · 2023-02-19 · in Password protect a static HTML page
  11. The readme links to this issue wrt that decision https://github.com/robinmoisson/staticrypt/issues/19 It seems that the hmac validation makes the GCM unnecessary in their thread model
    comment by 411111111111111 · 2023-02-18 · in Password protect a static HTML page
  12. The linked readme agrees with that https://github.com/robinmoisson/staticrypt#is-it-secure
    comment by 411111111111111 · 2023-02-18 · in Password protect a static HTML page
  13. …than what OWASP recommends[2]. I wouldn't personally put anything you want secure behind this. [1]: https://github.com/robinmoisson/staticrypt/blob/5dac008ba644... [2]: https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...
    comment by VoidWhisperer · 2023-02-18 · in Password protect a static HTML page
  14. I'm not a cryptographer, but I'm pretty sure that CBC ( https://github.com/robinmoisson/staticrypt/blob/main/lib/cry... ) should be replaced with GCM ( https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypt... ) since this is not a…
    comment by Xeoncross · 2023-02-18 · in Password protect a static HTML page
  15. For anyone else wondering what the KDF is, it appears to be PBKDF2 with 1000 iterations: https://github.com/robinmoisson/staticrypt/blob/5dac008ba644...
    comment by Retr0id · 2023-02-18 · in Password protect a static HTML page
  16. ▲ 653
    Password protect a static HTML page
    story by mooreds · 2023-02-18 · 266 comments
  17. …the open source project? [Edit: looks like this may already be on the way to addressing your issue https://github.com/robinmoisson/staticrypt/issues/1 ]
    comment by johnhenry · 2017-06-14 · in Show HN: Password-protect a static HTML page