luzifer/ots
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Update reference scripts with PBKDF2 key derivation

Browse source 
Signed-off-by: Knut Ahlers <knut@ahlers.me>
This commit is contained in:
Knut Ahlers 2023-03-17 20:37:19 +01:00
parent fb05e214f1
commit cfffb71765
Signed by: luzifer
GPG key ID: D91C3E91E4CAD6F5
2 changed files with 20 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
cli_create.sh
View file

@ -20,7 +20,7 @@ SECRET=${1:-}
pass=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | head -c 8 || true) pass=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | head -c 8 || true)
# Encrypt the secret # Encrypt the secret
ciphertext=$(echo "${SECRET}" | openssl aes-256-cbc -base64 -pass "pass:${pass}" -md md5 2>/dev/null) ciphertext=$(echo "${SECRET}" | openssl aes-256-cbc -base64 -pass "pass:${pass}" -iter 300000 -md sha512 2>/dev/null)
# Create a secret and extract the secret ID # Create a secret and extract the secret ID
id=$( id=$(

2
cli_get.sh
View file

@ -25,4 +25,4 @@ geturl="${host}/api/get/${id}"
# fetch secret and decrypt to STDOUT # fetch secret and decrypt to STDOUT
curl -sSf "${geturl}" | jq -r ".secret" | curl -sSf "${geturl}" | jq -r ".secret" |
openssl aes-256-cbc -base64 -pass "pass:${pass}" -md md5 -d 2>/dev/null openssl aes-256-cbc -base64 -pass "pass:${pass}" -iter 300000 -md sha512 -d 2>/dev/null