mirrors/rage
1
0
Fork 0
mirror of https://github.com/str4d/rage.git synced 2025-04-04 19:37:51 +03:00
Code Issues Projects Releases Packages Wiki Activity
460 commits 12 branches 25 tags 4.6 MiB
Commit graph

460 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jack Grigg
103ea61c43 Decryptor::{new_async, decrypt_async} 
MSRV is bumped to 1.39.0 for async/await syntax.
 2020-05-17 11:53:24 +12:00
Jack Grigg
b7106794eb Stream::decrypt_async 2020-05-17 11:50:47 +12:00
Jack Grigg
2916733314 Refactor impl Read for StreamReader 2020-05-17 11:50:05 +12:00
Jack Grigg
0568422d98 impl AsyncRead for ArmoredReader 2020-05-17 11:48:24 +12:00
Jack Grigg
6605a28f48 Make ArmoredReader generic over the type of buffered reader 
This requires changing Read bounds through the Decryptor stack to
BufRead bounds.
 2020-05-17 11:48:24 +12:00
Jack Grigg
44e1884eac Read nonce for v1 format in Decryptor::new 
A short input is now detected earlier, and no input reading is necessary
during the decryption process.
 2020-05-16 14:26:57 +12:00
Jack Grigg
27a400a02f Reorganise some code 2020-05-16 14:19:05 +12:00
Jack Grigg
ad0ac9d320 Refactor armor detection in ArmoredReader 
The previous implementation had multiple calls to the inner reader
interspersed throughout the validation logic. The new implementation
relies on the caller to perform a single read_exact(), and safely
handles over-reads.
 2020-05-16 14:13:36 +12:00
Jack Grigg
4cfb629130 Modularise internals of ArmoredReader 
- Common cached-byte handling is now in a single function.
- Parsing of armored lines is now handled outside the impl Read.
 2020-05-16 14:08:13 +12:00
str4d
922e3b5f27
Merge pull request #103 from str4d/u128-stream-nonce 
Refactor STREAM nonce using u128
 2020-04-27 15:15:23 +12:00
Jack Grigg
29c271663c Refactor STREAM nonce using u128 2020-04-27 13:22:52 +12:00
str4d
c28b3d023e
Merge pull request #102 from str4d/recipient-stanza 
Rename RecipientLine to RecipientStanza
 2020-04-27 12:53:58 +12:00
Jack Grigg
583fda21cf Rename RecipientLine to RecipientStanza 2020-04-27 11:36:11 +12:00
str4d
7712d8b7d3
Merge pull request #101 from str4d/age-core-primitives 
age_core: Expose primitives for AEAD and HKDF
 2020-04-26 11:53:46 +12:00
Jack Grigg
2291ccbcf8 age_core: Expose primitives for AEAD and HKDF 
This enables reuse of these common primitives within the upcoming plugin
system, alongside the core parsers and serializers.
 2020-04-26 00:10:38 +12:00
Jack Grigg
7acb129f5b Update benchmark code for Encryptor API change 2020-04-25 21:47:54 +12:00
Jack Grigg
627e602efc gumdrop 0.8 2020-04-25 21:09:59 +12:00
Jack Grigg
07ca5f939c afl 0.8 2020-04-25 20:59:02 +12:00
Jack Grigg
521247b1b7 cargo update 2020-04-25 20:58:14 +12:00
str4d
698d56f6c5
Merge pull request #100 from str4d/unknown-header-versions 
Improve handling of unknown header versions
 2020-04-08 21:27:22 +12:00
Jack Grigg
e2a1c782ab CI: Explicitly add clippy component 2020-04-08 21:18:59 +12:00
Jack Grigg
6ad1e30111 cargo clippy 2020-04-08 00:57:19 +12:00
Jack Grigg
159da6837d Add AFL header fuzzer 2020-04-08 00:50:53 +12:00
Jack Grigg
21f8f5a4b9 Serialize unknown headers 
We don't store anything after the first line for unknown headers,
because we have no way to determine where the header ends and the data
begins. Anything after the first header line would be treated as fixed
bytes in either case.
 2020-03-28 22:26:13 +13:00
Jack Grigg
41674d5d79 Enforce newline at end of first line of header 
This is the case even for unknown header versions, which can only alter
anything after the first line.
 2020-03-28 22:25:17 +13:00
Jack Grigg
ce319a25ee Update Homebrew formula to v0.4.0 2020-03-25 14:55:27 +13:00
str4d
ffa85eccdd
Merge pull request #96 from str4d/release-0.4.0 
Release 0.4.0
 2020-03-25 14:35:00 +13:00
Jack Grigg
9adf7e5749 v0.4.0 2020-03-25 11:55:40 +13:00
Jack Grigg
3b7d631b61 rage-mount: Fix for new read_identities parameter 2020-03-25 11:54:44 +13:00
Jack Grigg
6e2ad124cc Update usage docs in README 2020-03-25 10:32:35 +13:00
Jack Grigg
491c4c6814 cargo update 2020-03-25 10:32:35 +13:00
Jack Grigg
cf2025c60b Consistently refer to "age files" 2020-03-25 01:38:04 +13:00
Jack Grigg
bbd617cec5 Remove unused Error enum cases 2020-03-25 01:38:04 +13:00
str4d
e923b41229
Merge pull request #95 from str4d/94-cli-usability 
Improve CLI usability
 2020-03-25 01:37:00 +13:00
Jack Grigg
e79dc5a084 Provide a more useful error when an identity file is not found 2020-03-25 01:16:24 +13:00
Jack Grigg
afc1f51181 More consistent naming in manpages 2020-03-25 00:58:41 +13:00
Jack Grigg
25ad23bd2a Tidy up rage-keygen and rage-mount help text and manpages 2020-03-25 00:58:15 +13:00
Jack Grigg
908216c297 Overhaul rage help text and manpage 2020-03-25 00:57:27 +13:00
Jack Grigg
b2f8c6b973 rage-keygen: Print the public key to stderr if output is not TTY 
This makes it easier for the user to access the public key; they can
copy it directly from the terminal instead of opening the output file.
 2020-03-25 00:43:12 +13:00
Jack Grigg
bf4a038bba Fix clippy warnings 2020-03-23 22:11:21 +13:00
str4d
3e666979a7
Merge pull request #92 from str4d/encrypted-openssh-key-aes256-cbc 
Add support for OpenSSH keys encrypted with "aes256-cbc"
 2020-03-23 21:37:24 +13:00
Jack Grigg
0170250fc6 Add support for OpenSSH keys encrypted with "aes256-cbc" 
When OpenSSH introduced its current encrypted-key format, ssh-keygen
defaulted to "aes256-cbc" for the cipher. This was changed in OpenSSH 7.6
(released 2017-10-03) to "aes256-ctr", and is the same to this day.

Adding support for "aes256-cbc" ensures compatibility with all encrypted
keys generated by ssh-keygen in this format since it was introduced in
OpenSSH 6.5 (released 2014-01-30).

See also https://github.com/FiloSottile/age/issues/100
 2020-03-23 21:28:20 +13:00
str4d
cb2b6aebf0
Merge pull request #91 from str4d/54-pipe-errors 
Give a more useful error when encryption fails with BrokenPipe
 2020-03-21 14:21:02 +13:00
Jack Grigg
e0594211dd Give a more useful error when encryption fails with BrokenPipe 
If a user tries to pipe to a program that is not reading from stdin (or
stops doing so early), the default Rust error is something like:

    Broken pipe (os error 32)

which is pretty opaque. While there might be other possible causes for
this error, we handle the most likely cause by wrapping this with a
custom error that suggests the user check whether the output is being
read. For example, this command would trigger the error:

    rage -p -a file.txt | cat foo

while this would not:

    rage -p -a file.txt | cat -

Closes str4d/rage#54.
 2020-03-21 13:41:21 +13:00
str4d
7b2b055fe1
Merge pull request #90 from str4d/wasm-workaround 
Guess scrypt work factor for targets where SystemTime::now() panics
 2020-03-19 20:19:29 +13:00
Jack Grigg
037e30224e Guess scrypt work factor for targets where SystemTime::now() panics 
Currently this is just WASM targets except wasm32-wasi.
 2020-03-18 10:27:57 +13:00
Jack Grigg
e4acbbcf58 Test building with wasm32-wasi target 2020-03-18 10:08:16 +13:00
str4d
ea1ccc3d13
Merge pull request #89 from str4d/refactor-encryptor 
Refactor Encryptor
 2020-03-17 22:55:15 +13:00
Jack Grigg
e4339e09f9 Consume self from age::Encryptor::wrap_output 
This makes it harder to accidentally reuse a passphrase for multiple
encrypted files.
 2020-03-17 22:31:56 +13:00
Jack Grigg
b3a8648020 Make Encryptor an opaque struct with documented constructors 2020-03-17 22:18:23 +13:00