Show HN: Creds – manage API keys with GPG on the command line
github.com
github.com
Lazy version:
$ encfs $HOME/Dropbox/creds $HOME/.creds
$ cat >~/bin/creds <<<'EOF'
#!/bin/sh
$CREDS=$HOME/.creds/$2.sh
case "$1" in
add|edit)
$EDITOR $CREDS
[ -f $CREDS ] && chmod +x $CREDS
;;
list)
echo $HOME/.creds/*.sh \
| xargs -I '{}' -n1 basename {} .sh \
| less -SRFX
;;
esac
EOF
$ chmod +x ~/bin/creds
Maybe there is an alternative that I don't know of?
Don't look at the source code of GPG, it will give you nightmares.
crypto_secretbox_easy() for both encrypting + signing in the traditional public-key fashion. AES-256-GCM is there for symmetric sessions. Even OTP's are supported. I don't think there's the full PKI/WoT implementation in there, at the moment, but it's definitely sufficient to do most of the heavy lifting.
(N.b. the documentation is only like 70 pages long, read the relevant sections on: sodium_memzero(), sodium_mlock(), the notes on VMs, the notes if you have swapon, the notes on disabling coredumps, don't use malloc, use sodium_malloc() (and with that, the appropriate padding precautions should be taken if you use sodium_allocarray()), and source your entropy properly. All of this is covered in the API guide. Consult it, because I'm likely misremembering one or two things.)