1 058b0118 2005-01-03 devnull .TH SECSTORE 1
3 058b0118 2005-01-03 devnull aescbc, secstore, ipso \- secstore commands
4 058b0118 2005-01-03 devnull .SH SYNOPSIS
5 058b0118 2005-01-03 devnull .B secstore
11 058b0118 2005-01-03 devnull .B -(g|G)
12 058b0118 2005-01-03 devnull .I getfile
16 058b0118 2005-01-03 devnull .I putfile
20 058b0118 2005-01-03 devnull .I rmfile
36 058b0118 2005-01-03 devnull .B aescbc
38 058b0118 2005-01-03 devnull .I <cleartext
39 058b0118 2005-01-03 devnull .I >ciphertext
41 058b0118 2005-01-03 devnull .B aescbc
43 058b0118 2005-01-03 devnull .I <ciphertext
44 058b0118 2005-01-03 devnull .I >cleartext
48 058b0118 2005-01-03 devnull .B -a -e -l -f -s
54 058b0118 2005-01-03 devnull .SH DESCRIPTION
56 058b0118 2005-01-03 devnull .I Secstore
57 058b0118 2005-01-03 devnull authenticates to the server
58 058b0118 2005-01-03 devnull using a password and optionally a hardware token,
59 058b0118 2005-01-03 devnull then saves or retrieves a file.
60 058b0118 2005-01-03 devnull This is intended to be a credentials store (public/private keypairs,
61 058b0118 2005-01-03 devnull passwords, and other secrets) for a factotum.
65 058b0118 2005-01-03 devnull stores a file on the secstore.
69 058b0118 2005-01-03 devnull retrieves a file to the local directory;
72 058b0118 2005-01-03 devnull writes it to standard output instead.
73 058b0118 2005-01-03 devnull Specifying
74 058b0118 2005-01-03 devnull .I getfile
75 058b0118 2005-01-03 devnull of . will send to standard output
76 058b0118 2005-01-03 devnull a list of remote files with dates, lengths and SHA1 hashes.
80 058b0118 2005-01-03 devnull removes a file from the secstore.
84 058b0118 2005-01-03 devnull prompts for a password change.
88 058b0118 2005-01-03 devnull produces more verbose output, in particular providing a few
89 058b0118 2005-01-03 devnull bits of feedback to help the user detect mistyping.
93 058b0118 2005-01-03 devnull says that the password should be read from standard input
94 058b0118 2005-01-03 devnull instead of from
95 058b0118 2005-01-03 devnull .BR /dev/cons .
99 058b0118 2005-01-03 devnull says that the password should be read from NVRAM
100 058b0118 2005-01-03 devnull instead of from
101 058b0118 2005-01-03 devnull .BR /dev/cons .
102 058b0118 2005-01-03 devnull This option is unsupported.
104 058b0118 2005-01-03 devnull The server is
105 058b0118 2005-01-03 devnull .BR tcp!$auth!5356 ,
106 058b0118 2005-01-03 devnull or the server specified by option
107 058b0118 2005-01-03 devnull .BR -s .
109 058b0118 2005-01-03 devnull For example, to add a secret to the file read by
110 058b0118 2005-01-03 devnull .IR factotum (4)
111 058b0118 2005-01-03 devnull at startup, open a new window, type
114 058b0118 2005-01-03 devnull % ramfs -p; cd /tmp
115 058b0118 2005-01-03 devnull % auth/secstore -g factotum
116 058b0118 2005-01-03 devnull secstore password:
117 058b0118 2005-01-03 devnull % echo 'key proto=apop dom=x.com user=ehg !password=hi' >> factotum
118 058b0118 2005-01-03 devnull % auth/secstore -p factotum
119 058b0118 2005-01-03 devnull secstore password:
120 058b0118 2005-01-03 devnull % read -m factotum > /mnt/factotum/ctl
123 058b0118 2005-01-03 devnull and delete the window.
124 058b0118 2005-01-03 devnull The first line creates an ephemeral memory-resident workspace,
125 058b0118 2005-01-03 devnull invisible to others and automatically removed when the window is deleted.
126 058b0118 2005-01-03 devnull The next three commands fetch the persistent copy of the secrets,
127 058b0118 2005-01-03 devnull append a new secret,
128 058b0118 2005-01-03 devnull and save the updated file back to secstore.
129 058b0118 2005-01-03 devnull The final command loads the new secret into the running factotum.
132 c8b6342d 2005-01-13 devnull .\" .I ipso
133 c8b6342d 2005-01-13 devnull .\" command packages this sequence into a convenient script to simplify editing of
134 c8b6342d 2005-01-13 devnull .\" .I files
135 c8b6342d 2005-01-13 devnull .\" stored on a secure store.
136 c8b6342d 2005-01-13 devnull .\" It copies the named
137 c8b6342d 2005-01-13 devnull .\" .I files
138 c8b6342d 2005-01-13 devnull .\" into a local
139 c8b6342d 2005-01-13 devnull .\" .IR ramfs (4)
140 c8b6342d 2005-01-13 devnull .\" and invokes
141 c8b6342d 2005-01-13 devnull .\" .IR acme (1)
142 c8b6342d 2005-01-13 devnull .\" on them. When the editor exits,
143 c8b6342d 2005-01-13 devnull .\" .I ipso
144 c8b6342d 2005-01-13 devnull .\" prompts the user to confirm copying modifed or newly created files back to
145 c8b6342d 2005-01-13 devnull .\" .I secstore.
146 c8b6342d 2005-01-13 devnull .\" If no
147 c8b6342d 2005-01-13 devnull .\" .I file
148 c8b6342d 2005-01-13 devnull .\" is mentioned,
149 c8b6342d 2005-01-13 devnull .\" .I ipso
150 c8b6342d 2005-01-13 devnull .\" grabs all the user's files from
151 c8b6342d 2005-01-13 devnull .\" .I secstore
152 c8b6342d 2005-01-13 devnull .\" for editing.
154 c8b6342d 2005-01-13 devnull .\" By default, ipso will edit the
155 c8b6342d 2005-01-13 devnull .\" .I secstore
156 c8b6342d 2005-01-13 devnull .\" files and, if
157 c8b6342d 2005-01-13 devnull .\" one of them is named
158 c8b6342d 2005-01-13 devnull .\" .BR factotum ,
159 c8b6342d 2005-01-13 devnull .\" flush your current keys from factotum and load
160 c8b6342d 2005-01-13 devnull .\" the new ones from the file.
161 c8b6342d 2005-01-13 devnull .\" If you supply any of the
162 c8b6342d 2005-01-13 devnull .\" .BR -e ,
163 c8b6342d 2005-01-13 devnull .\" .BR -f ,
165 c8b6342d 2005-01-13 devnull .\" .BR -l
166 c8b6342d 2005-01-13 devnull .\" options,
167 c8b6342d 2005-01-13 devnull .\" .I ipso
168 c8b6342d 2005-01-13 devnull .\" will just perform the operations you requested, i.e.,
169 c8b6342d 2005-01-13 devnull .\" edit, flush, and/or load.
172 c8b6342d 2005-01-13 devnull .\" .B -s
173 c8b6342d 2005-01-13 devnull .\" option of
174 c8b6342d 2005-01-13 devnull .\" .I ipso
175 c8b6342d 2005-01-13 devnull .\" invokes
176 c8b6342d 2005-01-13 devnull .\" .IR sam (1)
177 c8b6342d 2005-01-13 devnull .\" as the editor insted of
178 c8b6342d 2005-01-13 devnull .\" .BR acme ;
180 c8b6342d 2005-01-13 devnull .\" .B -a
181 c8b6342d 2005-01-13 devnull .\" option provides a similar service for files encrypted by
182 c8b6342d 2005-01-13 devnull .\" .I aescbc
183 c8b6342d 2005-01-13 devnull .\" .RI ( q.v. ).
184 c8b6342d 2005-01-13 devnull .\" With the
185 c8b6342d 2005-01-13 devnull .\" .B -a
186 c8b6342d 2005-01-13 devnull .\" option, the full rooted pathname of the
187 c8b6342d 2005-01-13 devnull .\" .I file
188 c8b6342d 2005-01-13 devnull .\" must be specified and all
189 c8b6342d 2005-01-13 devnull .\" .I files
190 c8b6342d 2005-01-13 devnull .\" must be encrypted with the same key.
191 c8b6342d 2005-01-13 devnull .\" Also with
192 c8b6342d 2005-01-13 devnull .\" .BR -a ,
193 c8b6342d 2005-01-13 devnull .\" newly created files are ignored.
195 058b0118 2005-01-03 devnull .I Aescbc
196 058b0118 2005-01-03 devnull encrypts and decrypts using AES (Rijndael) in cipher
197 058b0118 2005-01-03 devnull block chaining (CBC) mode.
198 058b0118 2005-01-03 devnull .SH SOURCE
199 c3674de4 2005-01-11 devnull .B \*9/src/cmd/secstore
200 058b0118 2005-01-03 devnull .SH SEE ALSO
201 058b0118 2005-01-03 devnull .IR factotum (4),
202 058b0118 2005-01-03 devnull Plan 9's \fIsecstore\fR(8)
203 058b0118 2005-01-03 devnull .SH BUGS
204 058b0118 2005-01-03 devnull There is deliberately no backup of files on the secstore, so
206 058b0118 2005-01-03 devnull (or a disk crash) is irrevocable. You are advised to store
207 058b0118 2005-01-03 devnull important secrets in a second location.
209 c8b6342d 2005-01-13 devnull .\" When using
210 c8b6342d 2005-01-13 devnull .\" .IR ipso ,
211 c8b6342d 2005-01-13 devnull .\" secrets will appear as plain text in the editor window,
212 c8b6342d 2005-01-13 devnull .\" so use the command in private.
