The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
I developed a Python CLI focused on applied cryptography (Applied Cryptography Toolkit v0.2.0).
Demonstration of the security pipeline in action:
° File encryption and decryption using AES-256-GCM
° Preservation of original file integrity
° State validation via SHA-256 Hash verification
The project's focus is to ensure a simple, fast, and secure workflow for data manipulation via the command line.
#Python | #Cybersecurity | #Cryptography | #AES256 | #CLI | #SoftwareEngineering | #PythonProgramming | #InfoSec | #Dev | #Freelance
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
Built a digital presence for Associated Engineers & Builders
I wanted this website to feel like an extension of the company itself. Organized, clear and made to last. The visual style takes ideas from blueprints engineering charts and technical papers while keeping everything simple and up to date.
I designed and developed the website around their 30+ years of work, bringing together their services, projects, history, and company story into one responsive experience.The aim was straightforward: change a construction company into a powerful modern online presence without losing its engineering roots.
Built from beginning to end. Concept, design, development and launch.
What do you think of the style😍 ?
Why relying on public CAs for internal infrastructure is an operational time bomb: The case for your own private Root and Sub-CA.
How many times has your engineering team been paged at 3:00 AM because an internal TLS certificate expired, taking down database connection pools, internal APIs, or background workers?
When securing internal networks, teams usually fall into one of three traps: 1. The Self-Signed Disaster: Generating ad-hoc self-signed certificates and scattering them across servers. Developers end up adding ``--insecure`` or ``insecure_skip_verify: true`` to application code, completely gutting transport security. 2. The Public ACME Workaround: Trying to use Let's Encrypt on non-routable internal hostnames (like ``.internal`` or RFC 1918 IPs). This requires leaking internal network topology to public DNS or storing sensitive DNS API credentials on every internal host. 3. The Spreadsheet Calendar: Tracking certificate expiration on calendar reminders until an un-tracked intermediate cert inevitably lapses.
Enterprise sovereign infrastructure solves this permanently with a dedicated, multi-tier Private Public Key Infrastructure (PKI):
• Offline Enterprise Root CA: An ultra-secure, isolated trust anchor that signs only subordinate issuing authorities and never touches online network traffic. • High-Availability Subordinate Issuing CAs (Sub-CAs): Domain-level issuing authorities (Dogtag PKI/FreeIPA) handling day-to-day certificate issuance. • Zero-Touch Automated Renewal: Using ``certmonger`` on Linux hosts to continuously monitor certificate lifecycles, automatically re-requesting certificates 30 days prior to expiration and reloading daemons hitlessly. • Mutual TLS (mTLS) Enforcement: Cryptographic workload identity verifying both server and client authenticity across internal database listeners, microservices, and admin interfaces.
Stop debugging expired certificates during outages. Deploy an automated private PKI foundation.
Deploy your sovereign PKI with our 2-week Enterprise FreeIPA HA & Centralized PKI/CA Sprint on Contra: https://contra.com/s/ALrNLqlg-enterprise-free-ipa-ha-and-centralized-pkica-infrastructure
#Security #CyberSecurity #Cryptography #Infrastructure #Linux #DevOps #SRE #Architecture
Why traditional mutable Linux is an operational liability: The modern path to custom, cryptographically sealed operating systems.
In most companies, operating system management still follows the "pet" paradigm: You deploy an Ubuntu or Debian server, run an Ansible playbook, and over the next three years, packages get updated, dependencies drift, manual SSH edits accumulate in ``/etc``, and no two servers in your fleet are mathematically identical.
When that server crashes, recovery takes hours of re-running fragile configuration management scripts, hoping an upstream package repository hasn't deprecated a dependency.
Modern systems engineering has moved beyond mutable operating systems. With tools like **mkosi**, **Unified Kernel Images (UKIs)**, and **systemd-repart**, we can build tailored, declarative, immutable Linux distributions and appliances:
1. Zero Configuration Drift: The entire operating system is compiled from a declarative recipe into an immutable, read-only root filesystem protected by ``dm-verity`` cryptographic hashes. Not even a root user can tamper with binaries on disk.
2. Cryptographic Boot Integrity: Kernel, initramfs, and kernel parameters are combined into a single Unified Kernel Image (UKI) PE binary, signed with private SecureBoot keys and sealed directly to hardware TPM2 registers.
3. Atomic A/B Updates: Dual-bank partition layouts orchestrated by ``systemd-sysupdate``. Updates happen atomically in the background. If a new OS release fails a health check on reboot, the hardware automatically rolls back to the previous known-good slot instantaneously.
4. Tailored for Purpose: Strip away gigabytes of bloatware. Build lean, hardened 150MB OS appliances purpose-built for hypervisors, edge routers, specialized database hosts, or air-gapped CI/CD runners.
Stop patching snowflake servers. Deploy mathematically verified, immutable Linux appliances.
Engineer your custom immutable Linux platform with our 2-week Sprint on Contra: https://contra.com/s/NNM66Akb-custom-linux-distribution-and-immutable-os-engineering-mkosi-and-uki
#Linux #OperatingSystems #Security #Infrastructure #Architecture #DevOps #SRE #Automation
