Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create password wrapper over cryptsetup #24

Open
Vincent43 opened this issue Feb 12, 2018 · 2 comments
Open

Create password wrapper over cryptsetup #24

Vincent43 opened this issue Feb 12, 2018 · 2 comments

Comments

@Vincent43
Copy link
Collaborator

Currently we support only luksOpen and luksAddKey commands without much customization. It would be better to have universal wrapper over cryptsetup commands which will pass ykfde password to them.

Example:

ykfde-wrapper luksFormat --hash sha256 --iter-time 5000 /dev/sda
will execute:
cryptsetup luksFormat --hash sha256 --iter-time 5000 /dev/sda
and automatically pass ykfde password to it.

@stuffo
Copy link
Contributor

stuffo commented Feb 12, 2018

moving the passphrase generation into a library would make this a 1-liner:
print_passphrase | cryptsetup $@
even fancier, one could filter $1 and only request YK interaction when required (eg. luksDump does need no passphrase).

with the current structure it would basically mean cloning ykfde-open which doesn't seem very smart from a maintenance POW. are there any plans regarding a library?

@Vincent43
Copy link
Collaborator Author

There are no any plans currently. I'm just throwing ideas about possible improvements. Personally I would do simple script without dependencies for better portability - one script is all you need. https://git.zx2c4.com/ctmg/about/ is good example.

If someone does library approach instead, I won't oppose.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants