sala is a software that lets you store passwords and other bits of sensitive plain-text information to encrypted files on a directory hierarchy. The information is protected by GnuPG's symmetrical encryption.
Basic usage
Passwords are stored in a directory hierarchy, each file containing one secret, like this:
/path/to/passwords
|-- example-service.com
| |-- +webmail
| | |-- amyuser
| | `-- aotheruser
| `-- +adminpanel
| `-- aadmin
`-- my-linux-box
|-- amyuser
`-- aroot
I use a convention of naming directories after services and using ausername as the file name. If a service has groups, categories, subservices, etc., I use subdirectories whose names are prefixed with +. Of course, you can come up with your own scheme, for example if you want to hide the usernames, too.
To create a new password store, first create an empty directory, change into it, and invoke:
sala init
This command asks for the master passphrase you want to use for the store. It then initializes the password store by creating a long random key and encrypting it with the master passphrase.
Create a new password for service/amyuser:
sala set service/amyuser
This command first asks you for the master passphrase, and then the secret that should be stored to the file service/amyuser. The intermediate directory service is created automatically.
To read the secret you just stored, invoke:
sala get service/amyuser
This command asks again for the master passphrase, and outputs the secret.
All the files are just normal files, so you can safely remove or rename files if you want to.
The above commands can also be used on multiple files at once:
sala set service2/amyuser service3/aotheruser
sala get service2/amyuser service3/aotheruser
If no command is specified, sala assumes get if the first file exists and set otherwise. That is, the command:
sala foo/abar
reads the secret foo/abar if the file exists, and creates a new secret otherwise. Note that this may not work as you expect for multiple files, as the existence of the first file determines whether to read or to write.
Configuration:
sala can be configured with an INI-style configuration file. sala tries to read the configuration from ~/.sala.conf and from sala.conf in the top directory of the password store. Neither of the files are required. If a configuration setting is specified in both files, the the latter takes precedence.
Here's the default configuration:
# All configuration settings are in the [sala] section.
[sala]
# The cipher to use with GnuPG's symmetrical encryption.
# Run "gpg --version" to list supported ciphers.
cipher = AES256
# Master key length, in bytes
key-length = 64
# A shell command to run to generate password suggestions
password-generator = pwgen -nc 12 10
Changing cipher only affects secrets that are set after the configuration setting is changed, i.e. the old secrets will not automatically be re-encrypted.
Only sala init uses the key-length option. If you want the master key to be of a different size, make sure the configuration file exists before you run sala init.
The password-generator option is run through the shell to generate password suggestions. If the command fails (is not found or exits with non-zero exit status), its output is ignored. Othewise, the output should consist of one or more words separated with whitespace (space, tab, newline, etc.). These words are presented to the user as password suggestions by sala set.
Under the hood
sala uses GnuPG's symmetric encryption. All encrypted files are in the GnuPG plain text (armor) format.
When the password store is initialized, a very long, truly random key is generated and stored to the file .salakey. Only this "master key" is encrypted with your master passphrase. All the other files in the store are encrypted with the master key.
Installation:
Install sala by invoking:
pip install sala
To install from source, invoke:
python setup.py install
Product's homepage
Requirements:
· Python
What's New in Version
· Add -r option for raw output format.
· Allow setting the store location with SALADIR environment variable and -C command line option.
· Add support for Python 3.2, drop support for Python 2.5.
· Drop the GnuPGInterface dependency. Sala now implements its own GnuPG wrapper.
· Add man page (in ReST format), move most of README there.
· Improve portability.
· Add a regression test suite (cram is required to run the tests).
Download sala 1.2 Free
Tags: store passwords , encrypted passwords , password , storage , encrypted ,
sala, files, master, file, store, password, ·, command, configuration, key, secret, directory, encrypted, · add, add, master passphrase, password store, stored, `--, option, passphrase, set, first, asks master passphrase, file exists
No comments:
Post a Comment