{% extends "base.html" %}

<!-- Enhanced SEO Meta Tags -->
{% block extrahead %}
  <!-- Microsoft Clarity Tracking -->
  <script type="text/javascript">
    (function(c,l,a,r,i,t,y){
        c[a]=c[a]||function(){(c[a].q=c[a].q||[]).push(arguments)};
        t=l.createElement(r);t.async=1;t.src="https://www.clarity.ms/tag/"+i;
        y=l.getElementsByTagName(r)[0];y.parentNode.insertBefore(t,y);
    })(window, document, "clarity", "script", "s1e2yidnyr");
  </script>

  <!-- Google tag (gtag.js) -->
  <script async src="https://www.googletagmanager.com/gtag/js?id=G-12NVM3W8FM"></script>
  <script>
    window.dataLayer = window.dataLayer || [];
    function gtag(){dataLayer.push(arguments);}
    gtag('js', new Date());
    gtag('config', 'G-12NVM3W8FM');
  </script>

  <!-- Open Graph / Facebook -->
  <meta property="og:type" content="website">
  <meta property="og:url" content="{% if page and page.canonical_url %}{{ page.canonical_url }}{% elif page and page.url %}{{ config.site_url }}{{ page.url }}{% else %}{{ config.site_url }}{% endif %}">
  <meta property="og:title" content="{% if page and page.meta and page.meta.title %}{{ page.meta.title }} - {{ config.site_name }}{% elif page and page.title and not page.is_homepage %}{{ page.title | striptags }} - {{ config.site_name }}{% else %}{{ config.site_name }}{% endif %}">
  <meta property="og:description" content="{% if page and page.meta and page.meta.description %}{{ page.meta.description }}{% else %}{{ config.site_description }}{% endif %}">
  <meta property="og:image" content="{{ config.site_url }}assets/images/fractum-og.png">
  <meta property="og:site_name" content="Fractum">

  <!-- Twitter -->
  <meta property="twitter:card" content="summary_large_image">
  <meta property="twitter:url" content="{% if page and page.canonical_url %}{{ page.canonical_url }}{% elif page and page.url %}{{ config.site_url }}{{ page.url }}{% else %}{{ config.site_url }}{% endif %}">
  <meta property="twitter:title" content="{% if page and page.meta and page.meta.title %}{{ page.meta.title }} - {{ config.site_name }}{% elif page and page.title and not page.is_homepage %}{{ page.title | striptags }} - {{ config.site_name }}{% else %}{{ config.site_name }}{% endif %}">
  <meta property="twitter:description" content="{% if page and page.meta and page.meta.description %}{{ page.meta.description }}{% else %}{{ config.site_description }}{% endif %}">
  <meta property="twitter:image" content="{{ config.site_url }}assets/images/fractum-og.png">

  <!-- Additional SEO Meta Tags -->
  <meta name="robots" content="index, follow">
  <meta name="language" content="English">
  <meta name="revisit-after" content="7 days">
  <meta name="classification" content="Security, Encryption, Privacy, Tools">
  
  <!-- Keywords for the homepage -->
  {% if page and page.is_homepage %}
  <meta name="keywords" content="secret sharing, shamir secret sharing, file encryption, AES-256-GCM, offline security, password manager, crypto wallet security, SSH key protection, air-gapped security, portable encryption, data protection, cybersecurity tools">
  {% endif %}

  <!-- Enhanced Structured Data for Software Application -->
  {% if page and page.is_homepage %}
  <script type="application/ld+json">
  {
    "@context": "https://schema.org",
    "@type": "SoftwareApplication",
    "name": "Fractum",
    "description": "{{ config.site_description }}",
    "url": "{{ config.site_url }}",
    "downloadUrl": "https://github.com/katvio/fractum",
    "softwareVersion": "latest",
    "operatingSystem": ["Windows", "macOS", "Linux"],
    "applicationCategory": "SecurityApplication",
    "applicationSubCategory": "Encryption Software",
    "offers": {
      "@type": "Offer",
      "price": "0",
      "priceCurrency": "USD"
    },
    "author": {
      "@type": "Organization",
      "name": "{{ config.site_author }}",
      "url": "https://katvio.com"
    },
    "programmingLanguage": ["Python"],
    "softwareRequirements": "Docker or Python 3.12+",
    "featureList": [
      "Shamir's Secret Sharing algorithm implementation",
      "AES-256-GCM military-grade encryption",
      "Offline operation for air-gapped security",
      "Cross-platform support (Windows, macOS, Linux)",
      "Docker containerization for isolation",
      "Enterprise-grade secret backup solution",
      "Cold storage for crypto wallets and SSH keys",
      "Zero-knowledge file splitting and encryption",
      "Coercion resistance through distributed shares",
      "Information-theoretic security guarantees",
      "Self-contained recovery application",
      "Protection against USB drive failure and bit rot",
      "Inheritance planning for digital assets",
      "Alternative to expensive HSM solutions"
    ],
    "screenshot": "{{ config.site_url }}assets/images/fractum-og.png",
    "license": "Open Source",
    "aggregateRating": {
      "@type": "AggregateRating",
      "ratingValue": "5",
      "ratingCount": "1"
    },
    "mainEntity": {
      "@type": "FAQPage",
      "mainEntity": [
        {
          "@type": "Question",
          "name": "What is Fractum secret sharing?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum is an enterprise-grade secret sharing tool that uses Shamir's Secret Sharing (SSS) and AES-256-GCM encryption to split sensitive files into encrypted shares. It's designed for secure cold storage of passwords, crypto wallets, SSH keys, and critical documents."
          }
        },
        {
          "@type": "Question", 
          "name": "How does Shamir's Secret Sharing work in Fractum?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum implements Shamir's Secret Sharing algorithm to split your encrypted file into multiple shares. You define a threshold (K) and total shares (N). For example, with K=3 and N=5, you need any 3 of the 5 shares to reconstruct the original file. This provides both security and redundancy."
          }
        },
        {
          "@type": "Question",
          "name": "Can Fractum be used offline for air-gapped security?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Yes, Fractum is designed for offline operation and air-gapped environments. It doesn't require internet connectivity for encryption or decryption operations, making it ideal for high-security scenarios where network isolation is critical."
          }
        },
        {
          "@type": "Question",
          "name": "What encryption standard does Fractum use?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum uses AES-256-GCM (Advanced Encryption Standard with 256-bit keys in Galois/Counter Mode), which provides both confidentiality and authenticity. This is the same encryption standard used by governments and military organizations worldwide."
          }
        },
        {
          "@type": "Question",
          "name": "Why choose Fractum over enterprise solutions like HashiCorp Vault or HSMs?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum is designed for cold storage scenarios while Vault/HSMs are for active secret management. Fractum is ideal for long-term secret storage, emergency recovery, air-gapped environments, and personal use cases without enterprise budgets. HSMs cost thousands of dollars and require infrastructure, while Fractum is free and works everywhere."
          }
        },
        {
          "@type": "Question",
          "name": "How does Fractum protect against coercion attacks and kidnapping?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum's distributed model protects against physical coercion by requiring geographic distribution of shares across multiple locations. Attackers would need days or weeks to collect the threshold number of shares from different states or countries, providing time for authorities to intervene."
          }
        },
        {
          "@type": "Question",
          "name": "What happens if I lose some shares?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum's threshold system provides built-in redundancy. You only need K shares (threshold) for recovery, so extra shares (N-K) protect against loss. For example, with a 3-of-5 threshold, you can lose 2 shares and still recover your data."
          }
        },
        {
          "@type": "Question",
          "name": "Can someone access my data with one share?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "No. This is guaranteed by Shamir's Secret Sharing mathematics. Having K-1 shares provides zero information about the original file. With a 3-of-5 threshold, having 1 or 2 shares tells an attacker nothing about your original file."
          }
        },
        {
          "@type": "Question",
          "name": "What about USB drive failure and bit rot?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum provides built-in protection through redundancy by design - you can lose N-K shares without data loss. Best practices include using multiple storage methods (USB, paper, metal, cloud), vendor diversity for USB drives, and annual refresh cycles."
          }
        },
        {
          "@type": "Question",
          "name": "Is Fractum overkill for most users?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum is designed for specific high-stakes scenarios: cryptocurrency holdings worth significant money, business-critical encryption keys, irreplaceable legal documents, infrastructure secrets, and family inheritance planning. Rule of thumb: if losing the secret would cost you more than $1,000 or cause significant disruption, Fractum is worth considering."
          }
        },
        {
          "@type": "Question",
          "name": "What if non-technical family members need to recover my secrets?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum addresses inheritance planning through self-contained shares (each includes the recovery application), cross-platform compatibility, detailed documentation built into the ZIP files, and simple command structure requiring minimal technical knowledge. Best practices include documenting share locations and training family members."
          }
        },
        {
          "@type": "Question",
          "name": "How does Fractum compare to traditional password managers?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Fractum is designed for cold storage and infrequent access, while password managers are for daily use. Fractum provides air-gapped security, mathematical guarantees, distributed storage, and file-level protection. Best practice is to use both - password managers for daily passwords, Fractum for critical long-term secrets."
          }
        }
      ]
    }
  }
  </script>
  {% endif %}

  <!-- Article Schema for documentation pages -->
  {% if page and not page.is_homepage and page.title %}
  <script type="application/ld+json">
  {
    "@context": "https://schema.org",
    "@type": "TechnicalArticle",
    "headline": "{{ page.title | striptags }}",
    "description": "{% if page and page.meta and page.meta.description %}{{ page.meta.description }}{% else %}Technical documentation for {{ page.title | striptags }} in Fractum secret sharing tool{% endif %}",
    "url": "{% if page.canonical_url %}{{ page.canonical_url }}{% else %}{{ config.site_url }}{{ page.url }}{% endif %}",
    "datePublished": "2026-04-20",
    "dateModified": "2026-01-02",
    "author": {
      "@type": "Organization",
      "name": "{{ config.site_author }}",
      "url": "https://katvio.com"
    },
    "publisher": {
      "@type": "Organization",
      "name": "{{ config.site_author }}",
      "url": "https://katvio.com"
    },
    "mainEntityOfPage": {
      "@type": "WebPage",
      "@id": "{% if page.canonical_url %}{{ page.canonical_url }}{% else %}{{ config.site_url }}{{ page.url }}{% endif %}"
    },
    "about": {
      "@type": "SoftwareApplication",
      "name": "Fractum",
      "applicationCategory": "SecurityApplication"
    }
  }
  </script>
  {% endif %}
{% endblock %}

<!-- Custom Footer -->
{% block footer %}
  {% include "partials/footer.html" %}
{% endblock %}