Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/tteeoo/sest
🔑 A local command-line based password manager using AES-256 encryption.
https://github.com/tteeoo/sest
command-line cryptography encryption go golang password-manager
Last synced: 6 days ago
JSON representation
🔑 A local command-line based password manager using AES-256 encryption.
- Host: GitHub
- URL: https://github.com/tteeoo/sest
- Owner: tteeoo
- License: bsd-2-clause
- Created: 2020-05-12T03:52:21.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2024-01-10T03:34:46.000Z (10 months ago)
- Last Synced: 2024-06-21T11:23:49.925Z (5 months ago)
- Topics: command-line, cryptography, encryption, go, golang, password-manager
- Language: Go
- Homepage:
- Size: 15.4 MB
- Stars: 3
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# sest: secure strings
`sest` (pronounced "es ee es tee") is a local command-line password manager.
`sest` stores information in "containers", which are really just json files containing a password hash, salts, and some encrypted json.
Each container has its own master password which is used to access its contents.
A container stores data in key-value pairs, with a main value, and another optional value, used to store usernames.
`sest` works on Linux based systems and probably most other UNIX based systems (not tested).
## Installation
If you have Go installed then simply clone the repo, cd into it, and run `go install`.
Otherwise, a Linux binary is provided with the latest release on GitHub.
The default directory where containers are stored is `$HOME/.sest`, set the environment variable `SEST_DIR` to change this (no slash at the end).
## Usage
```
sest [-h | --help ]
[-V | --verison]
[ [arguments]]
```
### Commands
```
ls lists all containers
mk makes a new container
ln lists all keys in a container
chp changes a container's password
del deletes a container
in stores a new key-value pair in a container or changes an existing key
cp copies the value of a key from a container to the clipboard (requires xclip)
rm removes a key-value pair from a container
out prints out the value of a key from a container
exp export a container to a json file
imp import a container from a json file
```
## Security
To be frank, I am no cryptography expert, and one may find a flaw in this system. I'm (interpret this how you wish) 99% sure that it's perfectly fine for storing sensitive information.
So, here's how it works:
* A random salt is generated and used with your password in an Argon2id hash
* Another random salt is generated and also stored alongside the above two values (base64 encoded) in every container
* The data of each container is encrypted with AES-256 GCM using your (verified) password Argon2 hashed with the other salt as the key
## License
`sest` is licensed under the [BSD 2-clause license](https://github.com/tteeoo/sest/blob/master/LICENSE), use this program at your own risk; it offers no warranty for stolen information.