Cryptographic & Security Model

STEGNOLINES establishes a multilayered defense-in-depth model that combines NIST-compliant symmetric encryption, heavy PBKDF2 key stretching, dynamic cover hashing, and pseudorandom spatial diffusion.

1. Tri-Layer Defense in Depth

Tri-Security Layer Architecture

1. Cryptographic Layer (Confidentiality): AES-256-CTR stream cipher transforms the message into high-entropy ciphertext with 0 bytes padding overhead.

2. Key Diversification Layer (Brute-Force Resistance): PBKDF2-HMAC-SHA256 with 100,000 iterations and a 16-byte salt extracted dynamically from the SHA-256 hash of the cover text.

3. Steganographic Spatial Layer (Unobservability): AES-256-CTR CSPRNG with Unbiased Rejection Sampling and PBKDF2-HMAC-SHA256 (100,000 rounds) key derivation scatters message bits across pseudorandom cover indices, eliminating modulo bias and masking the payload inside innocent text.

2. Statistical Attack & Brute-Force Mathematical Simulation

To evaluate the system's immunity against automated steganalysis and extraction attacks, formal statistical benchmarks were calculated on a 50-message chat conversation (6KB):

Parameter	Empirical Metric	Analysis
Hidden Symbols Detection Time	3.0 milliseconds	Rapid detection of Variation Selectors in raw Unicode buffers.
Message Extraction Latency	1,510 milliseconds	Single extraction attempt factoring PBKDF2 (100k rounds) + PRNG + AES.
Simulated Attack Trials	1,000,000 attempts	Simulating automated dictionary and brute-force key generation.

Estimated Cracking Time Formula & Breakdown

Total_Seconds = Number_of_Trials × (Extraction_Time_ms / 1000)
Total_Seconds = 1,000,000 × (1510 / 1000) = 1,510,000 Seconds

Days (D)	Hours (H)	Minutes (M)	Seconds (S)
17 Days	11 Hours	26 Minutes	40 Seconds

Because guessing both the Stego-Key and AES Password requires billions of permutations across long chat transcripts, unauthorized brute-force extraction is computationally infeasible.

3. Steganalysis Resistance & Forensic Visualizers

The application includes an advanced Forensics Diagnostics Dashboard that gives security auditors full transparency into the spatial encoding:

Steganography Hex Stream: Live view of injected Variation Selector code points (U+FE00–U+FE0F and U+E0100–U+E01EF).
PRNG Random Base Positions: Visual table of the deterministic character indices chosen by the CSPRNG generator.
Binary XOR Key Difference Mask: Interactive visual matrix displaying active bit flips versus matched carrier bits with real-time entropy calculation.