Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/olastor/age-plugin-sss
Age plugin to split keys and wrap them with different recipients using Shamir's Secret Sharing.
https://github.com/olastor/age-plugin-sss
age age-encryption age-plugin plugin shamir
Last synced: about 1 month ago
JSON representation
Age plugin to split keys and wrap them with different recipients using Shamir's Secret Sharing.
- Host: GitHub
- URL: https://github.com/olastor/age-plugin-sss
- Owner: olastor
- License: mit
- Created: 2023-12-22T20:02:33.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2024-07-28T15:51:45.000Z (5 months ago)
- Last Synced: 2024-08-03T18:15:58.521Z (5 months ago)
- Topics: age, age-encryption, age-plugin, plugin, shamir
- Language: Go
- Homepage:
- Size: 84 KB
- Stars: 18
- Watchers: 1
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-age - age-plugin-sss
README
# age-plugin-sss
⚠️ Consider this plugin to be experimental until the version v1.0.0 is published! Open for feedback and improvements. Disclaimer: This is my first project in Go. ⚠️
---
:scissors: Split encryption keys and encrypt key shares with different [age](https://github.com/FiloSottile/age) (licensed BSD 3-Clause) recipients.
:passport_control: Create (complex) policies about which combinations of identites can decrypt the file.
:pushpin: Uses Hashicorp Vault's [implementation](https://github.com/hashicorp/vault/blob/main/shamir/shamir.go) of Shamir's Secret Sharing (licensed MPL-2.0).
:memo: See [SPEC.md](https://github.com/olastor/age-plugin-sss/blob/main/SPEC.md) for more details.
---
## Installation
### Requirements
- [age](https://github.com/FiloSottile/age) (>= 1.1.0) or [rage](https://github.com/str4d/rage)
### Download/Install Binary
Download a the latest binary from the [release page](https://github.com/olastor/age-plugin-sss/releases). Copy the binary to your `$PATH` (preferably in `$(which age)`) and make sure it's executable.
You can also use the following script for installation:
- Installs binary to `~/.local/bin/age-plugin-sss` (change to your preferred directory)
- Make sure to adjust `OS` and `ARCH` if needed (`OS=darwin ARCH=arm64` for Apple Silicon, `OS=darwin ARCH=amd64` for older Macs)```bash
cd "$(mktemp -d)"
VERSION=v0.2.5 OS=linux ARCH=amd64; curl -L "https://github.com/olastor/age-plugin-sss/releases/download/$VERSION/age-plugin-sss-$VERSION-$OS-$ARCH.tar.gz" -o age-plugin-sss.tar.gz
tar -xzf age-plugin-sss.tar.gz
mv age-plugin-sss/age-plugin-sss ~/.local/bin
```Please note that Windows builds are currently not enabled, but if you need them please open a new issue and I'll try to look into it.
### Build from source
Alternatively the plugin can be built from source. Simply run
```bash
make build
```
and copy the binary `age-plugin-sss` to a directory of your `$PATH`.## Usage
### Basic Usage
#### Encryption
First, define a policy in YAML format:
```yaml
threshold: 2
shares:
- age1t7cexdfjmkk4fgsf6pgzhn0skk0qewxr9y7tdu3l639fdmptcaxqv3nznt
- age1jcq99v6f74gwstqhg2vsll5s3rckdys8ttr2nnrzpegxu0y533vqnf7d2u
- age1zunvd6ztdeljcxzhe70370cx5q54czyhy2qjgsnju9rsyjaexqqqfrxg2w
```In this case, the file key will be split into three shares, each of which will be encrypted with one of the three recipients in the `shares` array. The `threshold` specifies how many of the shares are required to decrypt the file again. For our example, any two identities that correspond to a recipient in the list will suffice.
You can not only use native age recipients (see below how to handle passwords), but also plugin or SSH recipients.
Next, generate a new recipient from this policy file:
```bash
$ age-plugin-sss --generate-recipient policy.yaml
age1sss1r79ssqqqqqqqqq8l2nxy6m5yyq2qpc9mkz0q2pv4uf2e5tsv0urpec5rqupvdwmhm8xqt05mypvanzmyktldcfy3j4kvul9p2znxn67ly9xdvedmn3hwey0xzq5f32e9myz74s50s496hhe842k5ret3gsjvl6ul7y92ftytzkfmkvkzaevvm3e3v709f5pa0u3jv9nrr2nhrtws8ee4ug2659vljczx392j7qa48x7x5cehsfeyz4vmvx0df6rmvls9mr47ez2thh6vqvqfhxnrzauha8alqqqqplll80huf5hzqqqqq3csvcr
```As you can see, recipients for this plugin can be quite long because they contain multiple other recipients used for encrypting key shares.
Now you can use this recipient to encrypt anything, e.g.
```bash
echo "it works" | age -r age1sss1r79ssqqqqqqqqq8l2nxy6m5yyq2qpc9mkz0q2pv4uf2e5tsv0urpec5rqupvdwmhm8xqt05mypvanzmyktldcfy3j4kvul9p2znxn67ly9xdvedmn3hwey0xzq5f32e9myz74s50s496hhe842k5ret3gsjvl6ul7y92ftytzkfmkvkzaevvm3e3v709f5pa0u3jv9nrr2nhrtws8ee4ug2659vljczx392j7qa48x7x5cehsfeyz4vmvx0df6rmvls9mr47ez2thh6vqvqfhxnrzauha8alqqqqplll80huf5hzqqqqq3csvcr -o testing.enc
```#### Decryption
First, define a new YAML file containing the identities to use for decryption with the following structure:
```yaml
identities:
- AGE-SECRET-KEY-1XUR5...
- AGE-SECRET-KEY-17FXT...
```This file only contains a flat list of identities. The structure of the policy (or order of shares) is not replicated here and thresholds or other information do not need to be included. There must be enough valid identities to meet the secret splitting threshold, though.
Next, generate an identity from the YAML file (similarly as done for recipients):
```bash
age-plugin-sss --generate-identity example-id.yaml > id.txt
```Finally, the encrypted file can be decrypted with the generated identity:
```bash
$ age -d -i id.txt testing.enc
it works
```### Advanced Usage
#### (More) Complex Policies
Let's say you want to encrypt a file so that in addition to your X25519 identity you also need one of two fido2 keys for decryption. This can be achived by adding a nested policy in one of the shares as such:
```yaml
threshold: 2
shares:
- age1t7cexdfjmkk4fgsf6pgzhn0skk0qewxr9y7tdu3l639fdmptcaxqv3nznt
- threshold: 1
shares:
- age1fido2-hmac1qqa...
- age1fido2-hmac1qqb...
```You can add as many nested level as you want. Please notice, however, that for decryption the (sss-)plugin might ask you which share to decrypt in the case of plugin recipients/identities interactively and that the recipient string encoding the policy will be rather long.
#### Pinning identities to a specific share
You can bypass the user interaction for selecting the share if the plugin is unsure about which one to choose by specifying a `share_id` in your identity file. To find out which share in the policy tree you want to target, you can inspect the policy of the encrypted file with the following command:
```
$ age-plugin-sss --inspect test.enc
sss (t=2)
├─ x25519 [id=1]
└─ sss (t=1)
├─ fido2-hmac [id=2]
└─ fido2-hmac [id=3]
```For example, you may only want to use one of your fido2 tokens for decryption because the other one is only a backup. In your identity YAML file, simply pin the `share_id` to the correct one:
```yaml
identities:
- AGE-SECRET-KEY-1XUR5...
- share_id: 3
identity: AGE-PLUGIN-FIDO2-HMAC-1VE5KGMEJ945X6CTRM2TF76
```#### SSH Recipients/Identities
It's also possible to include an SSH public key in a policy and an SSH private key in an identity. Make sure to use YAML's multi-line string formatting for the identity.
**Example:**
```yaml
# recipient.yaml
threshold: 1
shares:
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL84xOFSWXIcAeQK8CJ0qvHojdFZDuLGRe5FPg4aM3kY testing@local
``````yaml
# identity.yaml
identities:
- |
-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
QyNTUxOQAAACC/OMThUllyHAHkCvAidKrx6I3RWQ7ixkXuRT4OGjN5GAAAAKCxGCybsRgs
mwAAAAtzc2gtZWQyNTUxOQAAACC/OMThUllyHAHkCvAidKrx6I3RWQ7ixkXuRT4OGjN5GA
AAAEBqlzBxbT+cd7xs19UN6ZFKG2bb4vtoR6/7FHt7yJ4DZ784xOFSWXIcAeQK8CJ0qvHo
jdFZDuLGRe5FPg4aM3kYAAAAGnNlYmFzdGlhbkBmZWRvcmEuZnJpdHouYm94AQID
-----END OPENSSH PRIVATE KEY-----
```If the private key is passphrase-protected, you will be prompted for the password, **but only if the encrypted private key contains the public key**. Otherwise, you'll need to create a version of your private key that is not passphrase encrypted (see [here](https://stackoverflow.com/a/112409)). This issue is tracked in [#3](https://github.com/olastor/age-plugin-sss/issues/3).
#### Passwords
Let's say you want to split the encryption key into shares wrapped by different passwords. As there is no recipient string you can generate, you must provide a special keyword of the form `password-`, e.g.
```yaml
threshold: 3
shares:
- password-alice
- password-bob
- password-chris
```The plugin will ask you for each password upon encryption. Please notice that
- the name/slug is required, but it is not persisted in the encrypted file. It's only there for you to not confuse passwords when interacting with the cli.
- the name/slug is mandatory for encryption, but optional for decryption (as the plugin will try all password stanzas until it finds the correct one). So having one or multiple identities named `password` is fine.#### Converting recipients/identities back to YAML
You can always decode a recipient or identity with the `--decode` flag by passing the string via STDIN:
```bash
$ cat recipient.txt | age-plugin-sss --decode
threshold: 2
shares:
- recipient: age1t7cexdfjmkk4fgsf6pgzhn0skk0qewxr9y7tdu3l639fdmptcaxqv3nznt
- recipient: age1jcq99v6f74gwstqhg2vsll5s3rckdys8ttr2nnrzpegxu0y533vqnf7d2u
- recipient: age1zunvd6ztdeljcxzhe70370cx5q54czyhy2qjgsnju9rsyjaexqqqfrxg2w
```#### Using the same recipient multiple times
It's totally valid to define the same recipient more than once anywhere inside a policy. However, when decrypting you must list the same identity multiple times, as well. This is because with the current design the plugin assumes that one identity only unwraps one share. For plugin identities, you may also consider specifying the `share_id` in your identity YAML file.