clortho

Key/value store for shell use where both key and value are obfuscated
git clone git://git.defalsify.org/clortho.git
Info | Log | Files | Refs | LICENSE

readme.txt (590B)


      1 Clortho is a bash prototype for a tool that will be written in Rust.
      2 
      3 It is a key/values store, where both the key and value are obfuscated. 
      4 
      5 The key is stored as sha256 of passphrase || key.
      6 
      7 The value is symmetrically encrypted with passphrase. (the bash prototype uses ccrypt)
      8 
      9 The passphrase is given by setting the env var CLORTHO_PASSPHRASE
     10 
     11 To set:
     12 
     13 bash clortho.sh foo bar
     14 
     15 To get:
     16 
     17 bash clortho.sh foo
     18 
     19 This script it NOT SAFE for production use because it leaks password to process lists and tmpfs while executing. However, the key/value pairs, once produced, are safe to store.