Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

CLI Overview

shadowforge provides a single binary with subcommands grouped by function.

shadowforge <COMMAND>

Core Commands

CommandDescription
versionPrint version and git SHA
keygenGenerate a post-quantum key pair
embedEmbed a payload into a cover medium
extractExtract a hidden payload from a stego cover
embed-distributedSplit a payload across multiple covers with Reed-Solomon coding
extract-distributedReconstruct a payload from distributed stego covers
analyseEstimate cover capacity and detectability
archivePack/unpack archive bundles (ZIP, TAR, TAR.GZ)
completionsGenerate shell completion scripts

Countermeasure Commands

CommandThreat Addressed
scrubStylometric source identification
dead-dropTraffic analysis / sender-recipient linking
time-lockTime-sensitive source protection
watermarkInternal leak attribution detection
corpusStatistical steganalysis signature

Global Options

-h, --help     Print help
-V, --version  Print version

Steganographic Techniques

Most commands accept a --technique flag. Available techniques:

ValueCover TypeDescription
lsbPNG, BMPLeast-significant-bit substitution
dctJPEGDCT coefficient modulation
paletteGIF, indexed PNGPalette index substitution
lsb-audioWAVAudio LSB substitution
phaseWAVPhase encoding
echoWAVEcho hiding
zero-widthPlain textZero-width Unicode characters
pdf-streamPDFContent-stream LSB
pdf-metaPDFMetadata field embedding
corpusImage setZero-modification cover selection

Embedding Profiles

The embed and embed-distributed commands support --profile:

ProfileBehaviour
standardDefault — no detectability constraint
adaptiveSTC-inspired optimisation to bound detectability
survivableSurvives platform recompression (requires --platform)