Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/olastor/age-plugin-sss

Age plugin to split keys and wrap them with different recipients using Shamir's Secret Sharing.
https://github.com/olastor/age-plugin-sss

age age-encryption age-plugin plugin shamir

Last synced: about 1 month ago
JSON representation

Age plugin to split keys and wrap them with different recipients using Shamir's Secret Sharing.

Lists

README 

        
# age-plugin-sss



⚠️ Consider this plugin to be experimental until the version v1.0.0 is published! Open for feedback and improvements. Disclaimer: This is my first project in Go. ⚠️



---



:scissors: Split encryption keys and encrypt key shares with different [age](https://github.com/FiloSottile/age) (licensed BSD 3-Clause) recipients.



:passport_control: Create (complex) policies about which combinations of identites can decrypt the file.



:pushpin: Uses Hashicorp Vault's [implementation](https://github.com/hashicorp/vault/blob/main/shamir/shamir.go) of Shamir's Secret Sharing (licensed MPL-2.0).



:memo: See [SPEC.md](https://github.com/olastor/age-plugin-sss/blob/main/SPEC.md) for more details.



---



## Installation



### Requirements



- [age](https://github.com/FiloSottile/age) (>= 1.1.0) or [rage](https://github.com/str4d/rage)



### Download/Install Binary



Download a the latest binary from the [release page](https://github.com/olastor/age-plugin-sss/releases). Copy the binary to your `$PATH` (preferably in `$(which age)`) and make sure it's executable.



You can also use the following script for installation:



- Installs binary to `~/.local/bin/age-plugin-sss` (change to your preferred directory)

- Make sure to adjust `OS` and `ARCH` if needed (`OS=darwin ARCH=arm64` for Apple Silicon, `OS=darwin ARCH=amd64` for older Macs)



```bash

cd "$(mktemp -d)"

VERSION=v0.2.4 OS=linux ARCH=amd64; curl -L "https://github.com/olastor/age-plugin-sss/releases/download/$VERSION/age-plugin-sss-$VERSION-$OS-$ARCH.tar.gz" -o age-plugin-sss.tar.gz

tar -xzf age-plugin-sss.tar.gz

mv age-plugin-sss/age-plugin-sss ~/.local/bin

```



Please note that Windows builds are currently not enabled, but if you need them please open a new issue and I'll try to look into it.



### Build from source



Alternatively the plugin can be built from source. Simply run



```bash

go build -v ./cmd/...

```

and copy the binary `age-plugin-sss` to a directory of your `$PATH`.



## Usage



### Basic Usage



#### Encryption



First, define a policy in YAML format:



```yaml

threshold: 2

shares:

  - age1t7cexdfjmkk4fgsf6pgzhn0skk0qewxr9y7tdu3l639fdmptcaxqv3nznt

  - age1jcq99v6f74gwstqhg2vsll5s3rckdys8ttr2nnrzpegxu0y533vqnf7d2u

  - age1zunvd6ztdeljcxzhe70370cx5q54czyhy2qjgsnju9rsyjaexqqqfrxg2w

```



In this case, the file key will be split into three shares, each of which will be encrypted with one of the three recipients in the `shares` array. The `threshold` specifies how many of the shares are required to decrypt the file again. For our example, any two identities that correspond to a recipient in the list will suffice.



You can not only use native age recipients (see below how to handle passwords), but also plugin or SSH recipients.



Next, generate a new recipient from this policy file:



```bash

$ age-plugin-sss --generate-recipient policy.yaml

age1sss1r79ssqqqqqqqqq8l2nxy6m5yyq2qpc9mkz0q2pv4uf2e5tsv0urpec5rqupvdwmhm8xqt05mypvanzmyktldcfy3j4kvul9p2znxn67ly9xdvedmn3hwey0xzq5f32e9myz74s50s496hhe842k5ret3gsjvl6ul7y92ftytzkfmkvkzaevvm3e3v709f5pa0u3jv9nrr2nhrtws8ee4ug2659vljczx392j7qa48x7x5cehsfeyz4vmvx0df6rmvls9mr47ez2thh6vqvqfhxnrzauha8alqqqqplll80huf5hzqqqqq3csvcr

```



As you can see, recipients for this plugin can be quite long because they contain multiple other recipients used for encrypting key shares.



Now you can use this recipient to encrypt anything, e.g.



```bash

echo "it works" | age -r age1sss1r79ssqqqqqqqqq8l2nxy6m5yyq2qpc9mkz0q2pv4uf2e5tsv0urpec5rqupvdwmhm8xqt05mypvanzmyktldcfy3j4kvul9p2znxn67ly9xdvedmn3hwey0xzq5f32e9myz74s50s496hhe842k5ret3gsjvl6ul7y92ftytzkfmkvkzaevvm3e3v709f5pa0u3jv9nrr2nhrtws8ee4ug2659vljczx392j7qa48x7x5cehsfeyz4vmvx0df6rmvls9mr47ez2thh6vqvqfhxnrzauha8alqqqqplll80huf5hzqqqqq3csvcr -o testing.enc

```



#### Decryption



First, define a new YAML file containing the identities to use for decryption with the following structure:



```yaml

identities:

  - AGE-SECRET-KEY-1XUR5...

  - AGE-SECRET-KEY-17FXT...

```



This file only contains a flat list of identities. The structure of the policy (or order of shares) is not replicated here and thresholds or other information do not need to be included. There must be enough valid identities to meet the secret splitting threshold, though.



Next, generate an identity from the YAML file (similarly as done for recipients):



```bash

age-plugin-sss --generate-identity example-id.yaml > id.txt

```



Finally, the encrypted file can be decrypted with the generated identity:



```bash

$ age -d -i id.txt testing.enc

it works

```



### Advanced Usage



#### (More) Complex Policies



Let's say you want to encrypt a file so that in addition to your X25519 identity you also need one of two fido2 keys for decryption. This can be achived by adding a nested policy in one of the shares as such:



```yaml

threshold: 2

shares:

  - age1t7cexdfjmkk4fgsf6pgzhn0skk0qewxr9y7tdu3l639fdmptcaxqv3nznt

  - threshold: 1

    shares:

      - age1fido2-hmac1qqa...

      - age1fido2-hmac1qqb...

```



You can add as many nested level as you want. Please notice, however, that for decryption the (sss-)plugin might ask you which share to decrypt in the case of plugin recipients/identities interactively and that the recipient string encoding the policy will be rather long.



#### Pinning identities to a specific share



You can bypass the user interaction for selecting the share if the plugin is unsure about which one to choose by specifying a `share_id` in your identity file. To find out which share in the policy tree you want to target, you can inspect the policy of the encrypted file with the following command:



```

$ age-plugin-sss --inspect test.enc

sss (t=2)

 ├─ x25519 [id=1]

 └─ sss (t=1)

     ├─ fido2-hmac [id=2]

     └─ fido2-hmac [id=3]

```



For example, you may only want to use one of your fido2 tokens for decryption because the other one is only a backup. In your identity YAML file, simply pin the `share_id` to the correct one:



```yaml

identities:

  - AGE-SECRET-KEY-1XUR5...

  - share_id: 3

    identity: AGE-PLUGIN-FIDO2-HMAC-1VE5KGMEJ945X6CTRM2TF76

```



#### SSH Recipients/Identities



It's also possible to include an SSH public key in a policy and an SSH private key in an identity. Make sure to use YAML's multi-line string formatting for the identity.



**Example:**



```yaml

# recipient.yaml

threshold: 1

shares:

  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL84xOFSWXIcAeQK8CJ0qvHojdFZDuLGRe5FPg4aM3kY testing@local

```



```yaml

# identity.yaml

identities:

  - |

    -----BEGIN OPENSSH PRIVATE KEY-----

    b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW

    QyNTUxOQAAACC/OMThUllyHAHkCvAidKrx6I3RWQ7ixkXuRT4OGjN5GAAAAKCxGCybsRgs

    mwAAAAtzc2gtZWQyNTUxOQAAACC/OMThUllyHAHkCvAidKrx6I3RWQ7ixkXuRT4OGjN5GA

    AAAEBqlzBxbT+cd7xs19UN6ZFKG2bb4vtoR6/7FHt7yJ4DZ784xOFSWXIcAeQK8CJ0qvHo

    jdFZDuLGRe5FPg4aM3kYAAAAGnNlYmFzdGlhbkBmZWRvcmEuZnJpdHouYm94AQID

    -----END OPENSSH PRIVATE KEY-----

```



If the private key is passphrase-protected, you will be prompted for the password, **but only if the encrypted private key contains the public key**. Otherwise, you'll need to create a version of your private key that is not passphrase encrypted (see [here](https://stackoverflow.com/a/112409)). This issue is tracked in [#3](https://github.com/olastor/age-plugin-sss/issues/3).



#### Passwords



Let's say you want to split the encryption key into shares wrapped by different passwords. As there is no recipient string you can generate, you must provide a special keyword of the form `password-`, e.g.



```yaml

threshold: 3

shares:

  - password-alice

  - password-bob

  - password-chris

```



The plugin will ask you for each password upon encryption. Please notice that



- the name/slug is required, but it is not persisted in the encrypted file. It's only there for you to not confuse passwords when interacting with the cli.

- the name/slug is mandatory for encryption, but optional for decryption (as the plugin will try all password stanzas until it finds the correct one). So having one or multiple identities named `password` is fine.



#### Converting recipients/identities back to YAML



You can always decode a recipient or identity with the `--decode` flag by passing the string via STDIN:



```bash

$ cat recipient.txt | age-plugin-sss --decode

threshold: 2

shares:

    - recipient: age1t7cexdfjmkk4fgsf6pgzhn0skk0qewxr9y7tdu3l639fdmptcaxqv3nznt

    - recipient: age1jcq99v6f74gwstqhg2vsll5s3rckdys8ttr2nnrzpegxu0y533vqnf7d2u

    - recipient: age1zunvd6ztdeljcxzhe70370cx5q54czyhy2qjgsnju9rsyjaexqqqfrxg2w

```



#### Using the same recipient multiple times



It's totally valid to define the same recipient more than once anywhere inside a policy. However, when decrypting you must list the same identity multiple times, as well. This is because with the current design the plugin assumes that one identity only unwraps one share. For plugin identities, you may also consider specifying the `share_id` in your identity YAML file.