safe, branch HEAD

Use libsodium default parameters for key derivation

2022-10-19T13:34:30Z

commit 6a87b7bf64a003e76795677e8c32fa90628d982c parent 27a7417e7ddf4db577995be2d4595dad9f418c5a Author: Willy Goiffon Date: Wed, 19 Oct 2022 15:34:30 +0200 Use libsodium default parameters for key derivation

Document new secret format

2022-10-19T08:17:41Z

commit 27a7417e7ddf4db577995be2d4595dad9f418c5a parent a25d4e0e8990e3c9baeb922bcd5d2acb73055a7e Author: Willy Goiffon Date: Wed, 19 Oct 2022 10:17:41 +0200 Document new secret format

Implement cream format for secrets

2022-10-19T07:52:18Z

commit a25d4e0e8990e3c9baeb922bcd5d2acb73055a7e parent efb4beb219890a5796415c790604a282d6b37399 Author: Willy Goiffon Date: Wed, 19 Oct 2022 09:52:18 +0200 Implement cream format for secrets

unveil() and pledge() safe-agent

2022-08-21T15:35:42Z

commit efb4beb219890a5796415c790604a282d6b37399 parent 628d4291e5d7aff1034d71d33de9e877aaa56027 Author: Willy Goiffon Date: Sun, 21 Aug 2022 17:35:42 +0200 unveil() and pledge() safe-agent

safe-agent: code cleanup

2022-08-21T15:09:18Z

commit 628d4291e5d7aff1034d71d33de9e877aaa56027 parent bda607548494962049a8b89cfd26b06304393807 Author: Willy Goiffon Date: Sun, 21 Aug 2022 17:09:18 +0200 safe-agent: code cleanup

Decorelate testing master password from key derivation

2022-08-21T13:02:51Z

commit bda607548494962049a8b89cfd26b06304393807 parent c541f712cd990950f121cc599b35db5b4559368c Author: Willy Goiffon Date: Sun, 21 Aug 2022 15:02:51 +0200 Decorelate testing master password from key derivation

Add pledge() support

2022-08-21T10:04:01Z

commit c541f712cd990950f121cc599b35db5b4559368c parent 4a78dc13dd075b6f9d0ea18d92f9b94847fdf7e5 Author: Willy Goiffon Date: Sun, 21 Aug 2022 12:04:01 +0200 Add pledge() support

Support setting _DEBUG macro to allow core dumps

2022-08-21T09:20:28Z

commit 4a78dc13dd075b6f9d0ea18d92f9b94847fdf7e5 parent 279215e654f6f675d8f69f06261ddcc5ad408db7 Author: Willy Goiffon Date: Sun, 21 Aug 2022 11:20:28 +0200 Support setting _DEBUG macro to allow core dumps

Harden in-memory buffer management

2022-08-21T09:12:38Z

commit 279215e654f6f675d8f69f06261ddcc5ad408db7 parent a073a1418c42baa858c25cb26b616de3b070d2ac Author: Willy Goiffon Date: Sun, 21 Aug 2022 11:12:38 +0200 Harden in-memory buffer management Ensure that all critical memory chunks are defined and mlock()'d right off the start of the program. This commit also removes useless memory allocations in readpass(), and zero out memory upon termination. munlock() calls are removed for simplicity, as memory doesn't need to be unlocked.

Check unveil() return status

2022-08-21T07:55:02Z

commit a073a1418c42baa858c25cb26b616de3b070d2ac parent 6425e260efef9e9f80c24d3d5116d2dc05837330 Author: Willy Goiffon Date: Sun, 21 Aug 2022 09:55:02 +0200 Check unveil() return status

Add unveil() support on OpenBSD

2022-08-19T17:07:29Z

commit 6425e260efef9e9f80c24d3d5116d2dc05837330 parent c2750950f47475b591b2e70c6079310f7b2f6e0c Author: Willy Goiffon Date: Fri, 19 Aug 2022 19:07:29 +0200 Add unveil() support on OpenBSD

Move default values into config.h

2022-07-26T12:00:56Z

commit c2750950f47475b591b2e70c6079310f7b2f6e0c parent 438f1df0c768a5da0bd223c0aebd2805e7278f7e Author: Willy Goiffon Date: Tue, 26 Jul 2022 14:00:56 +0200 Move default values into config.h

Reorder manpage flags alphabetically

2022-05-24T14:18:09Z

commit 438f1df0c768a5da0bd223c0aebd2805e7278f7e parent 879752024f41f05503b49fd8c24da0ca3756619b Author: Willy Goiffon Date: Tue, 24 May 2022 16:18:09 +0200 Reorder manpage flags alphabetically

Add possibility to read password from stdin

2022-05-24T13:50:10Z

commit 879752024f41f05503b49fd8c24da0ca3756619b parent 0f6635934701f13688f1cad6556e3953bfa0f1ee Author: Willy Goiffon Date: Tue, 24 May 2022 15:50:10 +0200 Add possibility to read password from stdin

Allow overwriting secret using -f

2022-04-19T09:43:15Z

commit 0f6635934701f13688f1cad6556e3953bfa0f1ee parent e10074b11c87d7259672b053b6664b9765901189 Author: Willy Goiffon Date: Tue, 19 Apr 2022 11:43:15 +0200 Allow overwriting secret using -f

Fix typo in safe(1)

2020-06-10T07:32:06Z

commit e10074b11c87d7259672b053b6664b9765901189 parent 8bda0996fb87386904d05e6aa2b0300155e03312 Author: Willy Goiffon Date: Wed, 10 Jun 2020 09:32:06 +0200 Fix typo in safe(1)

Update README

2020-06-02T11:44:22Z

commit 8bda0996fb87386904d05e6aa2b0300155e03312 parent 35e97236826a77a6612f6617fefaa8ab6a521fc5 Author: Willy Goiffon Date: Tue, 2 Jun 2020 13:44:22 +0200 Update README

Rename MANDIR to MANPREFIX

2020-06-02T11:41:48Z

commit 35e97236826a77a6612f6617fefaa8ab6a521fc5 parent 27ff858581ea50790034bd24fe035934bcce5237 Author: Willy Goiffon Date: Tue, 2 Jun 2020 13:41:48 +0200 Rename MANDIR to MANPREFIX

Remove empty lines from manpages

2020-05-29T16:57:08Z

commit 27ff858581ea50790034bd24fe035934bcce5237 parent 24514eac0b2b9b1d5d8cc8d9e25d667b6eacd6e5 Author: Willy Goiffon Date: Fri, 29 May 2020 18:57:08 +0200 Remove empty lines from manpages

Clean up README

2020-05-28T20:47:00Z

commit 24514eac0b2b9b1d5d8cc8d9e25d667b6eacd6e5 parent f158a5d8336e0b58252599e19db3dd30981519a6 Author: Willy Goiffon Date: Thu, 28 May 2020 22:47:00 +0200 Clean up README

Update man pages descriptions

2020-05-28T18:39:46Z

commit f158a5d8336e0b58252599e19db3dd30981519a6 parent 4129b34dc1faaf7438f2842c3793327c8c7e0103 Author: Willy Goiffon Date: Thu, 28 May 2020 20:39:46 +0200 Update man pages descriptions

Add manpage to describe the file store format

2020-05-28T17:28:44Z

commit 4129b34dc1faaf7438f2842c3793327c8c7e0103 parent ac8f9db28832ea1072c36b26cbe74cedea033ff9 Author: Willy Goiffon Date: Thu, 28 May 2020 19:28:44 +0200 Add manpage to describe the file store format

Close display blocks in manpages

2020-05-28T17:28:14Z

commit ac8f9db28832ea1072c36b26cbe74cedea033ff9 parent 56ecbb86eba0309e57bec3469a052d388b776e0a Author: Willy Goiffon Date: Thu, 28 May 2020 19:28:14 +0200 Close display blocks in manpages

Support building on OpenBSD

2019-12-22T08:48:36Z

commit 56ecbb86eba0309e57bec3469a052d388b776e0a parent 51673ba1810eacc7b5a297b6690896a45280bbba Author: Willy Goiffon Date: Sun, 22 Dec 2019 09:48:36 +0100 Support building on OpenBSD

Add -k flag to ask external program for pass

2019-09-16T05:39:04Z

commit 51673ba1810eacc7b5a297b6690896a45280bbba parent 7958db741782dcf11e3eae3b0b45efe69b81fa82 Author: Tudor Roman Date: Mon, 16 Sep 2019 07:39:04 +0200 Add -k flag to ask external program for pass

Fix return status of servekey() to be an error

2019-08-23T11:57:24Z

commit 7958db741782dcf11e3eae3b0b45efe69b81fa82 parent cb5cd138e476c31fdc7436f797b095b2e460bdf5 Author: Willy Goiffon Date: Fri, 23 Aug 2019 13:57:24 +0200 Fix return status of servekey() to be an error

agent: Only watch POLLOUT when key is loaded

2019-08-23T11:50:46Z

commit cb5cd138e476c31fdc7436f797b095b2e460bdf5 parent fc777644442cd8bf8742e916aef145e281ae1b01 Author: Willy Goiffon Date: Fri, 23 Aug 2019 13:50:46 +0200 agent: Only watch POLLOUT when key is loaded This fix a bug where you cannot send the key to the agent. POLLOUT event will always be present in the case of a unix domain socket, and is ready right when the session is established, before any data can be received. It means that when the key is not in memory, and the client connects to send it, POLLOUT will be ready while POLLIN is not. As the key is not in memory, the agent simply closes the connection before the client could send the key. As a side effect, once the key is in memory, you cannot overwrite the in-memory key by simply sending some data again (which is good!). To do so, one must first kill -USR1 the agent to make it forget the key, then send it again.

Use strlcpy() and fix uninitialized variables

2019-08-23T12:10:57Z

commit fc777644442cd8bf8742e916aef145e281ae1b01 parent d2808e58d2794e82db767b7d4f4265464c9ed182 Author: Willy Goiffon Date: Fri, 23 Aug 2019 14:10:57 +0200 Use strlcpy() and fix uninitialized variables Patch from Tudor Roman, thanks!

Put mk/make config in the same config.mk file

2019-07-02T08:45:59Z

commit d2808e58d2794e82db767b7d4f4265464c9ed182 parent 4f8efc28ce2b680632a2151e8ac53f66001add8a Author: Willy Goiffon Date: Tue, 2 Jul 2019 10:45:59 +0200 Put mk/make config in the same config.mk file

Fix copyright date

2019-07-01T09:13:32Z

commit 4f8efc28ce2b680632a2151e8ac53f66001add8a parent 4bac7e9631def0fa235cb43c3a4928d5cc8e24e3 Author: Willy Goiffon Date: Mon, 1 Jul 2019 11:13:32 +0200 Fix copyright date

Update manpage/README to reflect -r/-p change

2019-06-28T15:28:37Z

commit 4bac7e9631def0fa235cb43c3a4928d5cc8e24e3 parent ac52d5dbb901eb0a7039843b3bd87acd3b2f7d64 Author: Willy Goiffon Date: Fri, 28 Jun 2019 17:28:37 +0200 Update manpage/README to reflect -r/-p change

Allow decrypting secrets when -r is specified

2019-06-28T12:02:23Z

commit ac52d5dbb901eb0a7039843b3bd87acd3b2f7d64 parent cadbbb3e8554063b5f363c0b395fa7849072dfa5 Author: Willy Goiffon Date: Fri, 28 Jun 2019 14:02:23 +0200 Allow decrypting secrets when -r is specified

Add new flag to change password prompt

2019-06-28T11:51:53Z

commit cadbbb3e8554063b5f363c0b395fa7849072dfa5 parent be7b04615cd9bef464bc7541b50d5c27022f80b9 Author: Willy Goiffon Date: Fri, 28 Jun 2019 13:51:53 +0200 Add new flag to change password prompt

Check return status for readpass()

2019-06-27T15:12:05Z

commit be7b04615cd9bef464bc7541b50d5c27022f80b9 parent 813084d053bc475fecc17656d1c9de39a0d3ff3d Author: Willy Goiffon Date: Thu, 27 Jun 2019 17:12:05 +0200 Check return status for readpass()

Deny coredumps to protect sensitive data

2019-06-27T13:45:47Z

commit 813084d053bc475fecc17656d1c9de39a0d3ff3d parent acc0b2109c065f82169563f5390b2d316372e336 Author: Willy Goiffon Date: Thu, 27 Jun 2019 15:45:47 +0200 Deny coredumps to protect sensitive data

Prompt password from an external program when there is no tty

2019-06-27T13:20:11Z

commit acc0b2109c065f82169563f5390b2d316372e336 parent d29f4d7d42826983eb47319afa94fe4b7af696ca Author: Willy Goiffon Date: Thu, 27 Jun 2019 15:20:11 +0200 Prompt password from an external program when there is no tty If there is no tty available, the program pointed to by the SAFE_ASKPASS environment variable will be called and the password will be read from its standard output.

Remove test on errno from logic

2019-06-26T12:32:18Z

commit d29f4d7d42826983eb47319afa94fe4b7af696ca parent 3c694e0f523bbb3332de0efa5721c3940b1a556a Author: Willy Goiffon Date: Wed, 26 Jun 2019 14:32:18 +0200 Remove test on errno from logic

Fix issues with uninitialized values

2019-06-26T12:31:05Z

commit 3c694e0f523bbb3332de0efa5721c3940b1a556a parent c8ba1506f499e21b9a7c5d71c8dc1566c0ea5d0a Author: z3bra Date: Wed, 26 Jun 2019 14:31:05 +0200 Fix issues with uninitialized values

Add verbose mode and logs to safe-agent

2019-06-25T12:45:21Z

commit c8ba1506f499e21b9a7c5d71c8dc1566c0ea5d0a parent 41e7172dd2f4194452b6c03709e0cc5f3c7418b8 Author: Willy Goiffon Date: Tue, 25 Jun 2019 14:45:21 +0200 Add verbose mode and logs to safe-agent

Fail early when pushing key if socket is not set

2019-06-25T12:36:25Z

commit 41e7172dd2f4194452b6c03709e0cc5f3c7418b8 parent e4c62d2894b9a3536e0251575bae76a12a3f152c Author: Willy Goiffon Date: Tue, 25 Jun 2019 14:36:25 +0200 Fail early when pushing key if socket is not set

Reword / Rearrange manpages and README

2019-06-25T07:06:35Z

commit e4c62d2894b9a3536e0251575bae76a12a3f152c parent fcb30202c868763203d8dc6f490e030e29a3b6d7 Author: Willy Goiffon Date: Tue, 25 Jun 2019 09:06:35 +0200 Reword / Rearrange manpages and README

Lock/Unlock sensitive memory chunks

2019-06-24T16:10:01Z

commit fcb30202c868763203d8dc6f490e030e29a3b6d7 parent 2439226cb260c2c813d69e7a71cb0e2cdf739625 Author: Willy Goiffon Date: Mon, 24 Jun 2019 18:10:01 +0200 Lock/Unlock sensitive memory chunks

Remove duplicate deriv() call

2019-06-24T16:06:48Z

commit 2439226cb260c2c813d69e7a71cb0e2cdf739625 parent 65e4f6001d14f83bbbd27e6478b6711da3fb0009 Author: Willy Goiffon Date: Mon, 24 Jun 2019 18:06:48 +0200 Remove duplicate deriv() call

Prevent segfault if socket path is unset

2019-06-24T14:46:40Z

commit 65e4f6001d14f83bbbd27e6478b6711da3fb0009 parent 68736e81ed0205d8f2c49fbaf4ef8b6bd8de54b5 Author: Willy Goiffon Date: Mon, 24 Jun 2019 16:46:40 +0200 Prevent segfault if socket path is unset

Fix makefile for OpenBSD

2019-06-24T14:40:04Z

commit 68736e81ed0205d8f2c49fbaf4ef8b6bd8de54b5 parent cd4ed5d1df38d2a509dbfea3265ac7e949deb2b9 Author: Willy Goiffon Date: Mon, 24 Jun 2019 16:40:04 +0200 Fix makefile for OpenBSD

Simplify readkey() error handling

2019-06-24T13:54:07Z

commit cd4ed5d1df38d2a509dbfea3265ac7e949deb2b9 parent 32c829dd0d53fdfdb9427e11e82c79399080e320 Author: Willy Goiffon Date: Mon, 24 Jun 2019 15:54:07 +0200 Simplify readkey() error handling

Add SAFE_DIR environment variable to set safe location

2019-06-24T13:08:29Z

commit 32c829dd0d53fdfdb9427e11e82c79399080e320 parent 8d00f4085a08c0720d01d6e2eda5d186882f07fc Author: Willy Goiffon Date: Mon, 24 Jun 2019 15:08:29 +0200 Add SAFE_DIR environment variable to set safe location

Fallback to password prompt if agent fails

2019-06-24T12:55:43Z

commit 8d00f4085a08c0720d01d6e2eda5d186882f07fc parent c07b6ff8bcc151cd80a182e7ee90aea3631a9386 Author: Willy Goiffon Date: Mon, 24 Jun 2019 14:55:43 +0200 Fallback to password prompt if agent fails

Ask for password twice when creating master entry

2019-06-24T12:48:25Z

commit c07b6ff8bcc151cd80a182e7ee90aea3631a9386 parent 579eb5dc88c06576da5b3f159e28e71ecb65ae03 Author: Willy Goiffon Date: Mon, 24 Jun 2019 14:48:25 +0200 Ask for password twice when creating master entry

Update examples in manpage / README

2019-06-24T12:35:08Z

commit 579eb5dc88c06576da5b3f159e28e71ecb65ae03 parent 4cf289d713e858ae1ed0dc4e2c744787562aa3b9 Author: Willy Goiffon Date: Mon, 24 Jun 2019 14:35:08 +0200 Update examples in manpage / README

Print child PID when forking agent

2019-06-24T10:33:33Z

commit 4cf289d713e858ae1ed0dc4e2c744787562aa3b9 parent 91a51b83db319c0421378197ce9998a1d71a6cfc Author: Willy Goiffon Date: Mon, 24 Jun 2019 12:33:33 +0200 Print child PID when forking agent

Interpret empty agent response has "No key in memory"

2019-06-24T10:32:40Z

commit 91a51b83db319c0421378197ce9998a1d71a6cfc parent 23350b3136fc4edcf2fa40975e466a8e70d27a7c Author: Willy Goiffon Date: Mon, 24 Jun 2019 12:32:40 +0200 Interpret empty agent response has "No key in memory" Whenever the agent replies to a socket read with a zero byte message, the client will assume that this is because the agent does not have the key in memory, and will thus prompt the user for the master password.

poll() clients in agent to prevent blocking

2019-06-24T10:09:13Z

commit 23350b3136fc4edcf2fa40975e466a8e70d27a7c parent b56e39e8835092c7b557297abf47860b3737480a Author: Willy Goiffon Date: Mon, 24 Jun 2019 12:09:13 +0200 poll() clients in agent to prevent blocking

Remove executable bit from socket

2019-06-24T10:05:32Z

commit b56e39e8835092c7b557297abf47860b3737480a parent 6907eb1ddbe9042e63a63d9fca702a2cd20302d2 Author: Willy Goiffon Date: Mon, 24 Jun 2019 12:05:32 +0200 Remove executable bit from socket

Detach safe-agent from controlling terminal by default

2019-06-24T06:59:49Z

commit 6907eb1ddbe9042e63a63d9fca702a2cd20302d2 parent abc98ebaee60796bd9e4340ddd4fe6afbd2645fe Author: Willy Goiffon Date: Mon, 24 Jun 2019 08:59:49 +0200 Detach safe-agent from controlling terminal by default

Update README

2019-06-12T11:35:42Z

commit abc98ebaee60796bd9e4340ddd4fe6afbd2645fe parent 1a8146eb3d01081a1e74ece9c2d57ca0e585921e Author: Willy Goiffon Date: Wed, 12 Jun 2019 13:35:42 +0200 Update README

Add manpage for safe-agent(1)

2019-06-12T11:32:21Z

commit 1a8146eb3d01081a1e74ece9c2d57ca0e585921e parent a3a722de801c1dff63a7b662b852a6ef41cd6232 Author: Willy Goiffon Date: Wed, 12 Jun 2019 13:32:21 +0200 Add manpage for safe-agent(1)

Update safe(1) manpage with latest changes

2019-06-12T11:30:51Z

commit a3a722de801c1dff63a7b662b852a6ef41cd6232 parent 05d24ed6c706cdf4bc29724ad1a6ef44c2f5879e Author: Willy Goiffon Date: Wed, 12 Jun 2019 13:30:51 +0200 Update safe(1) manpage with latest changes

Fix spacing in makefile

2019-06-12T11:29:52Z

commit 05d24ed6c706cdf4bc29724ad1a6ef44c2f5879e parent 741c691864896d536c40ae4639cd08c4fd85c201 Author: Willy Goiffon Date: Wed, 12 Jun 2019 13:29:52 +0200 Fix spacing in makefile

Update manpage to remove agent part

2019-06-07T10:43:55Z

commit 741c691864896d536c40ae4639cd08c4fd85c201 parent 2d6626a1f3a9b271d3e10724254f102de1958013 Author: Willy Goiffon Date: Fri, 7 Jun 2019 12:43:55 +0200 Update manpage to remove agent part

Make agent a standalone program

2019-06-07T10:34:10Z

commit 2d6626a1f3a9b271d3e10724254f102de1958013 parent 0f19ce9b57089e25c33edd01d9779b18d3affd41 Author: Willy Goiffon Date: Fri, 7 Jun 2019 12:34:10 +0200 Make agent a standalone program

Fork agent in manpage example

2019-06-06T17:28:46Z

commit 0f19ce9b57089e25c33edd01d9779b18d3affd41 parent f980db3687eb4ca584a48719335770c9ddc2c0f8 Author: Willy Goiffon Date: Thu, 6 Jun 2019 19:28:46 +0200 Fork agent in manpage example

Add missing flag to usage()

2019-06-06T17:27:38Z

commit f980db3687eb4ca584a48719335770c9ddc2c0f8 parent cc22b635aa5514321839e9107713bc296b353271 Author: Willy Goiffon Date: Thu, 6 Jun 2019 19:27:38 +0200 Add missing flag to usage()

Update manpage

2019-06-06T17:25:19Z

commit cc22b635aa5514321839e9107713bc296b353271 parent e06067da1d8a55e22ecdc8d2d257a92251391336 Author: Willy Goiffon Date: Thu, 6 Jun 2019 19:25:19 +0200 Update manpage

Make socket readable by user only

2019-06-06T17:24:46Z

commit e06067da1d8a55e22ecdc8d2d257a92251391336 parent 57acebdf13eb09a21d2fa90faefe844417d94122 Author: Willy Goiffon Date: Thu, 6 Jun 2019 19:24:46 +0200 Make socket readable by user only

Only load socket path from environment

2019-06-06T16:33:56Z

commit 57acebdf13eb09a21d2fa90faefe844417d94122 parent e46e21993c9e3e93d5fc2ac7c977a5200afa332c Author: Willy Goiffon Date: Thu, 6 Jun 2019 18:33:56 +0200 Only load socket path from environment

Load key from wherever possible before proceeding

2019-06-06T16:30:54Z

commit e46e21993c9e3e93d5fc2ac7c977a5200afa332c parent 5815c87b10844807519a2966560882d4966520ed Author: Willy Goiffon Date: Thu, 6 Jun 2019 18:30:54 +0200 Load key from wherever possible before proceeding

Send salt from agent

2019-06-06T16:27:57Z

commit 5815c87b10844807519a2966560882d4966520ed parent 7a35319955c94c158db21a7e368e58f974830d05 Author: Willy Goiffon Date: Thu, 6 Jun 2019 18:27:57 +0200 Send salt from agent

Force checking master password regardless of operation

2019-06-05T16:13:30Z

commit 7a35319955c94c158db21a7e368e58f974830d05 parent 788fd208467d17a169a655453b20510ba6245cfb Author: Willy Goiffon Date: Wed, 5 Jun 2019 18:13:30 +0200 Force checking master password regardless of operation

Write master salt outside writepass()

2019-06-05T16:10:43Z

commit 788fd208467d17a169a655453b20510ba6245cfb parent 5629cc83838f9cf85f53828e1f45cd6244abab58 Author: Willy Goiffon Date: Wed, 5 Jun 2019 18:10:43 +0200 Write master salt outside writepass()

Update README to reflec recent changes

2019-06-05T14:37:49Z

commit 5629cc83838f9cf85f53828e1f45cd6244abab58 parent 609ebec6b8b0a55f03a168ac77c601b750ec44e7 Author: Willy Goiffon Date: Wed, 5 Jun 2019 16:37:49 +0200 Update README to reflec recent changes

Add master password check before writesecret()

2019-06-05T09:50:32Z

commit 609ebec6b8b0a55f03a168ac77c601b750ec44e7 parent 98e15100b5dd00325bd675d6751e2b895e4705bd Author: Willy Goiffon Date: Wed, 5 Jun 2019 11:50:32 +0200 Add master password check before writesecret()

Write master password to safe if it doesn't exists

2019-06-05T08:31:23Z

commit 98e15100b5dd00325bd675d6751e2b895e4705bd parent 0fb5e8f423c445645c04d3b39e80041764482a79 Author: Willy Goiffon Date: Wed, 5 Jun 2019 10:31:23 +0200 Write master password to safe if it doesn't exists

Remove unneeded comment

2019-06-04T15:02:12Z

commit 0fb5e8f423c445645c04d3b39e80041764482a79 parent f166dae60fac29e8696634488db86856ecf1e35b Author: Willy Goiffon Date: Tue, 4 Jun 2019 17:02:12 +0200 Remove unneeded comment

Remove crypto state and header from safe struct

2019-06-04T14:59:51Z

commit f166dae60fac29e8696634488db86856ecf1e35b parent 981f3cc18d47f88883dbcbbe9469ba9d9da5d1a0 Author: Willy Goiffon Date: Tue, 4 Jun 2019 16:59:51 +0200 Remove crypto state and header from safe struct

Remove wrapping levels for encryption/decryption

2019-06-04T14:50:38Z

commit 981f3cc18d47f88883dbcbbe9469ba9d9da5d1a0 parent bcafea5b63b34d58cf930d2b6f490457e76a5e2c Author: Willy Goiffon Date: Tue, 4 Jun 2019 16:50:38 +0200 Remove wrapping levels for encryption/decryption

Initialize eof to 0 in xread()

2019-06-04T14:45:31Z

commit bcafea5b63b34d58cf930d2b6f490457e76a5e2c parent 45766eca7a2cd4147702b53872b9859048080d2b Author: Willy Goiffon Date: Tue, 4 Jun 2019 16:45:31 +0200 Initialize eof to 0 in xread()

Remove readsalt()

2019-06-04T13:02:34Z

commit 45766eca7a2cd4147702b53872b9859048080d2b parent f8c5590bb7bc47990032429488dd8f32fefeedf7 Author: Willy Goiffon Date: Tue, 4 Jun 2019 15:02:34 +0200 Remove readsalt()

Merge store_secret() and show_secret() into fdcrypt()

2019-06-04T12:55:42Z

commit f8c5590bb7bc47990032429488dd8f32fefeedf7 parent 69ffa57a1da9f61a17c3b08b4958c486cbcaa45b Author: Willy Goiffon Date: Tue, 4 Jun 2019 14:55:42 +0200 Merge store_secret() and show_secret() into fdcrypt()

Remove secret_exists()

2019-06-04T12:52:15Z

commit 69ffa57a1da9f61a17c3b08b4958c486cbcaa45b parent 5b1b2e8e67f4e3a59fc95af9d9036600d6900cc3 Author: Willy Goiffon Date: Tue, 4 Jun 2019 14:52:15 +0200 Remove secret_exists()

Rename secret_enc/decrypt to xenc/decrypt

2019-06-04T12:51:55Z

commit 5b1b2e8e67f4e3a59fc95af9d9036600d6900cc3 parent d89c6fc699fd695b5b7c6e000392da6a88f6e2b2 Author: Willy Goiffon Date: Tue, 4 Jun 2019 14:51:55 +0200 Rename secret_enc/decrypt to xenc/decrypt

Make tag and uint8_t in secret_encrypt()

2019-06-04T12:51:12Z

commit d89c6fc699fd695b5b7c6e000392da6a88f6e2b2 parent f9cce62c8b24ac4fb7f6d28ae6085b345081e4ca Author: Willy Goiffon Date: Tue, 4 Jun 2019 14:51:12 +0200 Make tag and uint8_t in secret_encrypt()

Make show_secret() use secret's salt in master pass absence

2019-06-03T16:13:37Z

commit f9cce62c8b24ac4fb7f6d28ae6085b345081e4ca parent 83e2319375810b7b77c167307da011cff8bc0635 Author: Willy Goiffon Date: Mon, 3 Jun 2019 18:13:37 +0200 Make show_secret() use secret's salt in master pass absence

Set default umask to 077 to limit socket read/write access

2019-06-03T16:01:49Z

commit 83e2319375810b7b77c167307da011cff8bc0635 parent abd3bdb063e173f695700fed0c8315d530902e9e Author: Willy Goiffon Date: Mon, 3 Jun 2019 18:01:49 +0200 Set default umask to 077 to limit socket read/write access

Retrieve key from agent if socket path is provided

2019-06-03T15:55:36Z

commit abd3bdb063e173f695700fed0c8315d530902e9e parent 14e7a02ab133fab082e46e0f4d8ea9ec898acd12 Author: Willy Goiffon Date: Mon, 3 Jun 2019 17:55:36 +0200 Retrieve key from agent if socket path is provided

Rename getkey() to readkey()

2019-06-03T15:54:44Z

commit 14e7a02ab133fab082e46e0f4d8ea9ec898acd12 parent 2ff98df8a471e3752443373548ba39abab46dd58 Author: Willy Goiffon Date: Mon, 3 Jun 2019 17:54:44 +0200 Rename getkey() to readkey()

Add missing libsodium initialisation (WTF?)

2019-06-03T15:50:24Z

commit 2ff98df8a471e3752443373548ba39abab46dd58 parent 7f1ba4677e4809b337e4224c714671a154cae185 Author: Willy Goiffon Date: Mon, 3 Jun 2019 17:50:24 +0200 Add missing libsodium initialisation (WTF?)

Read/Generate salt from a dedicated function

2019-06-03T15:47:17Z

commit 7f1ba4677e4809b337e4224c714671a154cae185 parent 8d9b39bc139f4c6231c36190f30506367792156a Author: Willy Goiffon Date: Mon, 3 Jun 2019 17:47:17 +0200 Read/Generate salt from a dedicated function

Open /dev/null in write-only

2019-06-03T15:42:19Z

commit 8d9b39bc139f4c6231c36190f30506367792156a parent 8b0d9811b499d09eca3f5718cd88844af2e9ecd3 Author: Willy Goiffon Date: Mon, 3 Jun 2019 17:42:19 +0200 Open /dev/null in write-only

Remove err() call in favor of return in getkey()

2019-06-03T15:38:34Z

commit 8b0d9811b499d09eca3f5718cd88844af2e9ecd3 parent cb46ec01b637619484afb68b08a3c715f86d5d6e Author: Willy Goiffon Date: Mon, 3 Jun 2019 17:38:34 +0200 Remove err() call in favor of return in getkey()

Change agent() function to print socket path + PID

2019-06-03T14:28:32Z

commit cb46ec01b637619484afb68b08a3c715f86d5d6e parent 04ee8744605e2ae4c120340960413eef3ff7294e Author: Willy Goiffon Date: Mon, 3 Jun 2019 16:28:32 +0200 Change agent() function to print socket path + PID

Rename master password file name

2019-06-03T14:06:12Z

commit 04ee8744605e2ae4c120340960413eef3ff7294e parent 5254f08121341ae91042257b11bd299788f3ebd5 Author: Willy Goiffon Date: Mon, 3 Jun 2019 16:06:12 +0200 Rename master password file name

Read key/salt and deriv key right from main()

2019-06-03T13:32:18Z

commit 5254f08121341ae91042257b11bd299788f3ebd5 parent 5bca68cbe7e38dd4c00464515a9755196db4fc8b Author: Willy Goiffon Date: Mon, 3 Jun 2019 15:32:18 +0200 Read key/salt and deriv key right from main() This allow checking the master password and deriving the key from it before storing/showing any password in/from the safe.

Refuse to store a secret that already exists

2019-06-03T10:27:55Z

commit 5bca68cbe7e38dd4c00464515a9755196db4fc8b parent fc05dcf4f8bcdcbb199a7a9d9a98e35852ad135e Author: Willy Goiffon Date: Mon, 3 Jun 2019 12:27:55 +0200 Refuse to store a secret that already exists

Remove 'open' from error messages

2019-06-03T10:24:42Z

commit fc05dcf4f8bcdcbb199a7a9d9a98e35852ad135e parent df835567ad72b5aeafbe36f3231a956c38bd5a81 Author: Willy Goiffon Date: Mon, 3 Jun 2019 12:24:42 +0200 Remove 'open' from error messages

Generate key within show/store functions rather than main()

2019-06-03T10:23:57Z

commit df835567ad72b5aeafbe36f3231a956c38bd5a81 parent 5dab94f82b2ff901e004fb3ef9692e3644208aac Author: Willy Goiffon Date: Mon, 3 Jun 2019 12:23:57 +0200 Generate key within show/store functions rather than main()

Reuse salt of special entry '.lock' if present

2019-06-03T09:37:42Z

commit 5dab94f82b2ff901e004fb3ef9692e3644208aac parent d559d079f0cbe3f4347898ce51962877c05eda01 Author: Willy Goiffon Date: Mon, 3 Jun 2019 11:37:42 +0200 Reuse salt of special entry '.lock' if present

Move genkey() call in main()

2019-06-01T11:07:08Z

commit d559d079f0cbe3f4347898ce51962877c05eda01 parent 151dd903e5f5b89b85ba0584418d067160172ee6 Author: Willy Goiffon Date: Sat, 1 Jun 2019 13:07:08 +0200 Move genkey() call in main()

Update genkey to write master password to safe

2019-05-31T16:02:31Z

commit 151dd903e5f5b89b85ba0584418d067160172ee6 parent 3a6a19326fb0700a02c76683c1d736b3c59b760a Author: Willy Goiffon Date: Fri, 31 May 2019 18:02:31 +0200 Update genkey to write master password to safe

Rewrite encrypt/decrypt to handle memory buffers

2019-05-31T15:27:33Z

commit 3a6a19326fb0700a02c76683c1d736b3c59b760a parent 19a78db25e6054e65e787442738bcbf3e4e88398 Author: Willy Goiffon Date: Fri, 31 May 2019 17:27:33 +0200 Rewrite encrypt/decrypt to handle memory buffers