WhisperVoice: Covert voice notes. Encrypts text and hides it via LLM-generated acrostic sentences. Murf.ai creates natural audio. Browser extension decrypts with passcode, revealing hidden message or playing decoy for unauthorized listeners. Uses LLM, Murf.ai, STT APIs
WhisperVoice is an innovative project demonstrating a multi-layered approach to secure and discreet voice communication. It tackles the challenge of hiding the very existence of a secret message within seemingly normal voice notes, making covert communication accessible and intuitive.
WhisperVoice leverages the power of three distinct APIs to achieve its goal of discreet and secure voice messaging:
-
Playfair Cipher (Robust Encryption): Employs this classic symmetric encryption algorithm for strong cryptographic security. The hidden message remains unreadable without the correct "keyword."
-
Large Language Model (LLM) (Steganography - Hiding in Plain Sight): The innovative core of our steganography. An LLM (e.g., ChatGPT) is prompted to generate a natural-sounding sentence where the first letter of each word spells out the Playfair ciphertext. This creates an "acrostic" poem, disguised as a normal sentence.
-
Murf.ai (AI Voice Synthesis): The LLM-generated "decoy message" is converted into remarkably natural-sounding human-like speech using the Murf.ai Text-to-Speech (TTS) API. This audio file, sounding like a regular voice note, is what gets transmitted.
-
Speech-to-Text (STT) API (Extraction): On the receiving end, an STT API (e.g., Google Cloud Speech-to-Text, AssemblyAI) transcribes the Murf.ai audio back into text for extraction.
-
Secret Message & Shared Keys: Sender inputs plaintext, a pre-shared Playfair "Keyword," and a "Passcode" for decryption.
-
Playfair Encryption: Plaintext is encrypted into a "Ciphertext" using the Playfair cipher and the Keyword.
-
LLM-Powered Steganography (The "First-Letter Code"):
-
The Playfair Ciphertext (e.g.,
KGYPCY) is used to prompt an LLM. -
The LLM generates a grammatically correct "Decoy Message" (e.g., "Kids gathered, yearning playfully, crunching yummies."), where the first letter of each word spells out the ciphertext.
-
-
Murf.ai Voice Synthesis: This Decoy Message is sent to the Murf.ai API, transforming it into a natural-sounding audio voice note.
-
Covert Transmission: The sender shares this audio file via standard messaging platforms (e.g., WhatsApp).
-
Voice Note Interception: A custom browser extension detects the incoming audio message on platforms like WhatsApp.
-
Passcode Prompt: The extension prompts the user for their shared "Passcode."
-
Conditional Playback/Decryption:
-
Incorrect Passcode: The extension simply plays the original "decoy" voice note. The listener hears a normal, but semantically irrelevant, message, unaware of any secret.
-
Correct Passcode & Extraction:
-
The audio is sent to a Speech-to-Text (STT) API for transcription back into the "Decoy Message Text."
-
The steganography rule is applied: the first letter of every word from the transcribed text is extracted (e.g.,
KGYPCY), reconstructing the "Playfair Ciphertext."
-
-
-
Playfair Decryption: Using the pre-shared "Keyword," the Playfair Ciphertext is decrypted, revealing the "Original Secret Message."
-
Message Reveal (Optional Voice Playback): The decrypted plaintext is presented (as text in a pop-up, or optionally converted to voice again via Murf.ai and played aloud for an immersive reveal).
-
Multi-layered Security: Combines cryptographic encryption with ingenious linguistic steganography for robust stealth.
-
AI for Advanced Discretion: Leverages LLMs to generate highly convincing, natural-sounding cover messages, turning ordinary voice notes into powerful covert communication channels.
-
Intuitive User Experience: The browser extension streamlines the complex process, making it user-friendly. The "sounds different" effect adds practical deception.
-
API-Driven Scalability: Demonstrates robust integration with multiple external APIs (LLM, Murf.ai, STT), highlighting real-world potential.
-
Hackathon Feasibility: A streamlined approach that balances advanced concepts with practical, demonstrable implementation.
-
Sensitive Information Exchange: For individuals or teams requiring deniability and discretion.
-
Journalism & Activism: Protecting sources and sensitive information in high-stakes environments.
-
Personal Privacy: A novel and secure way to exchange private messages, adding intrigue to communication.
Covert Voice Message Encryption and Steganography
To install both the sender and receiver extensions:
-
Clone this repository or download the source code as a ZIP file and extract it.
-
Open your Chrome browser and navigate to
chrome://extensions/. -
Enable Developer mode in the top right corner.
-
Click Load unpacked.
-
Select the folder containing the extension files:
(This should be the folder containing manifest.json)
- The WhisperVoice extension (sender and receiver) will now appear in your browser.
Both sender and receiver require API keys for external services.
- Go to Google AI Studio (or your chosen LLM provider).
- Sign in with your Google account.
- Create a new API key.
- Copy the key for use in the extension.
- Sign up at Murf.ai.
- Subscribe to a plan that includes API access.
- Go to your account settings to find your API key.
- Copy the key for use in the extension.
- Sign up at AssemblyAI (or your chosen STT provider).
- Get your API key from the dashboard.
- Copy the key for use in the extension.
- Click the WhisperVoice icon in your browser toolbar.
- In the settings interface:
- Enter your LLM (Gemini/ChatGPT) API key.
- Enter your Murf.ai API key.
- Enter your STT (AssemblyAI) API key.
- Set the Playfair Keyword (shared secret) for encryption/decryption.
- Click Save Keys/Settings.
β You are now ready to send and receive covert voice messages!
- Enter Your Secret Message
Type the confidential message into the sender interface.
- Set Encryption Parameters
- Ensure your Playfair keyword is correctly configured.
- Set a passcode (required for the receiver).
-
Choose Cover Theme (Optional) Select a theme (e.g., work, college, family) to guide the LLM in generating a decoy sentence.
-
Select Voice (Optional) Pick from available Murf.ai voice options.
-
Generate
- Encrypt your message with the Playfair cipher.
- Generate a decoy sentence where the first letters encode the ciphertext.
- Convert it to audio via Murf.ai.
- Share Download the audio file (MP3, WAV, etc.) and share via WhatsApp, email, etc.
You can start decryption in two ways:
- Navigate to any website.
- Look for the blue WhisperVoice button in the bottom-right corner.
- Click to open the upload modal.
- Click the WhisperVoice icon in the toolbar.
- Use the popup for quick access.
- Upload Audio
- Drag & drop or browse to select the audio file.
- Supported formats: MP3, WAV, M4A, OGG, WebM.
- Enter Passcode
- Input the passcode shared by the sender.
- Click Decrypt
- The extension will:
- Transcribe the audio via the STT API.
- Extract the hidden ciphertext.
- Decrypt using the Playfair keyword.
- (Optional) Convert the decrypted text back to speech.
- View Results
- See the decrypted secret message.
- Optionally play the synthesized audio.
- Encryption: Playfair cipher using a shared keyword.
- Steganography:
- Encoding: LLM generates a sentence where the first letter of each word encodes the ciphertext.
- Decoding: The extension extracts the first letters after transcription.
- Voice Synthesis: Murf.ai API.
- Speech-to-Text: AssemblyAI (or your chosen STT provider).
- MP3
- WAV
- M4A
- OGG
- WebM
- Multi-layer Protection: Encryption + steganography.
- Passcode Protection: Extra layer on the receiver side.
- Natural Cover: AI-generated sentences avoid suspicion.
- Local Processing: Encryption/decryption happens in-browser.
- Secure API Key Storage: Stored in Chrome's local storage.
- No Permanent Storage: Audio and transcriptions are discarded after processing.
- Floating Button: Quick access from any page.
- Upload Modal: Drag & drop files, enter passcode, see progress.
- Results Display: Decrypted message, optional audio playback.
Common Issues:
- Upload Fails: Check file format, size, and connection.
- API Errors: Verify keys and API quotas.
- Decryption Fails: Ensure matching Playfair keyword and clear audio.
- No Speech Detected: Try clearer audio or another file.
Error Examples:
Configuration Required: API keys missing.Invalid file format: Unsupported audio.No speech detected: STT could not transcribe.Decryption failed: Wrong passcode or keyword.
Key Components
- WhisperVoice Core: Encryption, steganography, API integration.
- PlayfairCipher Class: Cryptographic operations.
- UI Modules: Sender interface, upload modal, results display.
- API Modules: Gemini/Murf/STT communication.
This extension is for educational, personal, and legitimate privacy uses only. You are responsible for complying with applicable laws and third-party API terms of service.
v1.0.0 (Initial Release)
- Playfair cipher encryption/decryption.
- LLM-powered first-letter steganography.
- Murf.ai TTS integration.
- AssemblyAI STT integration.
- Chrome extension sender/receiver UI.
- API key management.
- Basic error handling and troubleshooting.
- Multi-format audio support.