ORIGINA — Digital Identity Registry for Software
Support
Certified System — Version 1.0

Your digital identity
for every line of code

ORIGINA is the official registry that links every software application to its certified developer. No one can modify, copy, or distribute your code without your explicit authorization.

AES-256
Military-grade encryption
2FA
TOTP dual factor
200K
PBKDF2 iterations
100%
Open standards

Source code is vulnerable by design

In a world where AI systems and third-party developers can copy, modify, and redistribute any software in seconds, code ownership has become a critical issue.

Traditional methods — software licenses, watermarks, obfuscation — are not enough. Having access to the files is all it takes to alter them.

ORIGINA solves this at the root: source code is encrypted with a cryptographic key that exists only while the authentic developer authenticates.

# Without ORIGINA
file = "app.py"
# Anyone can read, copy, modify

# With ORIGINA
file = "app.py.locked"
# AES-256-GCM + PBKDF2(200,000 iter)
# Readable ONLY with:
   correct developer_id
   valid TOTP code (30 sec)
   server confirmation

# Unauthorized access attempt:
InvalidTag: decryption failed

Real protection, not just symbolic

Every security mechanism has a weak point. ORIGINA is designed by eliminating the classic vulnerabilities.

🤖

AI Protection

AI models cannot analyze, replicate, or improve encrypted code. Only the authentic owner has access to the source.

🔑

Unguessable key

The AES key is derived through 200,000 PBKDF2 iterations from information the server never stores. There is no "key file" to steal.

📲

Mandatory second factor

Even if someone knows your Developer ID, without the TOTP code refreshing every 30 seconds they cannot unlock anything.

🔄

Controlled transfer

You can transfer an app to another certified developer with an authenticated operation. Tracked and irreversible without your consent.

🔍

Integrity verification

Every encrypted file includes a SHA-256 hash of the original source. Any unauthorized modification to the .locked file is detected immediately.

📋

Full traceability

Every lock, unlock, and transfer is logged with timestamp, IP, and developer identity. Immutable audit log.

What you get by registering

ORIGINA is not just security — it's a complete software identity management system.

🪪

Certified identity

Your Developer ID is unique and non-replicable. It is your digital signature as a software creator.

🏷️

Unique App ID per project

Each application receives an identifier cryptographically tied to you, generated via HMAC-SHA256.

🛡️

AES-256-GCM Encryption

The same standard used by governments and military. Each file is encrypted individually with a unique nonce.

📊

Management dashboard

View all your apps, encryption status, access history, and manage transfers.

Ready-to-use CLI

Python command-line tool. One command to encrypt, one to decrypt. Integrates into any workflow.

🌐

Open documented API

FastAPI backend with interactive OpenAPI docs. Integrable into CI/CD pipelines and enterprise systems.

How it works in 4 steps

From first sign-up to full project protection, in under 5 minutes.

1

Register

Create your account with email and password. Receive your unique Developer ID.

2

Set up 2FA

Scan the QR code with Google Authenticator. Your second factor is active.

3

Create App ID

Register your project and get an App ID cryptographically linked to your account.

4

Encrypt source

Use the CLI origina lock. Your .py files become .locked. Only you can open them.

Certified cryptographic standards

Every component is built on established cryptographic primitives and open standards.

🔒

AES-256-GCM

Authenticated encryption. Guarantees confidentiality and integrity of every file. Detects any tampering.

🔑

PBKDF2-SHA256

200,000 iterations for key derivation. Makes brute-force computationally impractical.

⏱️

TOTP RFC 6238

6-digit codes changing every 30 seconds. Compatible with any authenticator app.

🔗

HMAC-SHA256

App ID generated as HMAC of Developer ID + server secret. Unpredictable, non-replicable.

🍪

JWT + bcrypt

Sessions use JSON Web Tokens with expiry. Passwords hashed with bcrypt factor 12.

🚫

Key never stored

The AES key is recalculated on-demand and never persisted. Even with DB access, no one can decrypt.

Protect your code today

Registration is free. In 5 minutes your source code is protected with military-grade encryption.

Create your developer account →

Questions? We have answers.

If you lose TOTP access, contact support with identity verification via official document. We recommend storing the recovery code provided during registration in a safe place (e.g. password manager).
No. The backend never receives source files. It only provides the cryptographic key over HTTPS with TOTP authentication — all encryption/decryption happens locally via the CLI.
Yes. The transfer mechanism allows transferring app ownership to any registered developer. Enterprise support with organizations and roles is on the roadmap.
Currently the CLI handles .py files, but the encryption is file-type agnostic. Future versions will support JavaScript, TypeScript, Go, and others.
Locking can happen offline if you already have the key. Unlocking requires a server connection for TOTP verification. An offline mode with pre-authorized token is planned.
The protocol is based on verifiable open standards (AES-256-GCM, PBKDF2, TOTP RFC 6238, HMAC-SHA256). Source code is available for institutional audit on request.

Welcome to your panel

Dashboard › Overview
Registered apps
Encrypted apps
ACTIVE
Account status

Your Developer ID

Use this ID with the ORIGINA CLI to encrypt your projects.

Quick CLI guide

# Install dependencies
pip install cryptography requests

# Encrypt your project
python origina.py lock --dev-id <YOUR_DEV_ID> --app-id <APP_ID>

# Decrypt (requires TOTP)
python origina.py unlock --dev-id <YOUR_DEV_ID> --app-id <APP_ID>