MerloStegaSecure is a sophisticated graphical tool designed for steganography, enabling users to securely hide and extract encrypted text messages within image files. The application employs AES-256 encryption combined with Least Significant Bit (LSB) steganography to provide a robust double layer of data protection, all within a sleek and user-friendly Tkinter interface.

Key Features

• Versatile Image Support: Effortlessly embed text messages in various image formats, including PNG, BMP, JPG, JPEG, and WEBP.
• Strong Encryption: Utilizes AES-256 encryption in EAX mode to ensure high confidentiality and safety of the hidden messages.
• Password Protection: Protects the embedding and extraction processes with a user-defined password.
• User-Friendly Interface: Showcases an intuitive GUI built with Tkinter for seamless interaction.
• Error Handling: Features informative error messages for incorrect decryption attempts or missing inputs, enhancing user experience.
• Dynamic Saving: Allows users to save the newly created stego-images to their preferred locations.

How It Works

Hiding Text

1. Click "Carica Immagine" to upload an image to serve as the cover for the hidden message.
2. Input the text to conceal.
3. Provide a password for encryption.
4. Select "🔐 Nascondi Testo" to embed the text and choose where to save the modified image.

Revealing Text

1. Load the image containing the concealed text by clicking "Carica Immagine".
2. Enter the same password used during the embedding process.
3. Select "🔓 Estrai Testo" to recover the original message if the password matches.

Supported File Types

• Input Formats: .png, .bmp, .jpg, .jpeg, .webp
• Recommended Output Format: .png to minimize compression effects on the hidden data.

Security Considerations

The AES encryption process involves a hardcoded salt (stega_merlo) for key derivation. For applications intended for production, it is recommended to implement dynamic salt generation and secure storage practices to ensure optimal security. The system's EAX mode facilitates both confidentiality and integrity.

Acknowledgments

The project benefits from the steganography capabilities provided by the stegano library and cryptography powered by pycryptodome. The overall GUI and logic have been developed by Roy Merlo.