devconsoft / pycred Goto Github PK

Encryption backend AES

Generate a random 256 bit AES symmetric key when the back-end is first initialized.
It is saved in a location specified by its configuration.
All data for that store should be encrypted/decrypted using that key.
The key should be read only, and only by the user creating the store, mode 0o400.

When FileStorage backend creates the storage file, it should be in 0o600 mode and owned by the user.

The data file should be owned by the user and have permission 0o600, otherwise throw exception when trying to use the file - similar to how SSH behaves for sensitive files.

Usage:
pycred config [key] [value]

Manage pycred library config
pycred config, prints all config to stdout.
pycred config key, print config for specified key to stdout.
pycred config key value, set config value for key.

Encryption backend that uses a users id_rsa keys to encrypt/decrypt an AES symmetric key that is used to encrypt the data.

Usage:
pycred info [--format/-f std|raw|none] STORES...

Print info about the provided stores (choice from available stores)
list what backends are used and the location of the store-config file.

config-file: ~/.pycred/stores/mystore.yaml
encryption: clear
serialization: json
storage: file
----

If the raw format is used, print the content of the config-file instead.