javache / secure-exam-exchange Goto Github PK

The owner of the exam should be able to replace the encrypted copy of his exam with an unecrypted copy by providing the passphrase used (see section 3.2 of the report).

The following command should be used, while providing the password through stdin (probably the most secure option, other options)
openssl enc -aes-256-cbc -d -in "$FILE_ENC" -out "$FILE" -passin stdin

A professor should be able to edit the properties of the exams he created (but perhaps only before it is released, afterwards the exam should be immutable).

Editing all-properties would be nice-to-have, at the moment just being able to modify the list of participants (without exceptions), would be sufficient.

Exams should not be stored in the public web-accessible path, downloads should only be allowed through a controller action which verifies the permissions.

See section 3.3 of the report.

See section 3.4 of the report.

Somehow, the subdirectory "/ib" is not included. Example: https://zeus.ugent.be/system/exams/data/000/000/001/original/Munich.2005.HDRip.H264.AAC.Gopo.srt?1336419293

Additonally, the user should also be able to download the exam signature from this page.