summaryrefslogtreecommitdiffhomepage
path: root/keysafe.cabal
Commit message (Collapse)AuthorAge
* Filter out escape sequences and any other unusual characters when writing ↵Joey Hess2016-09-27
| | | | | | | all messages to the console. This should protect against all attacks where the server sends back a malicious message.
* Randomize the server list.Joey Hess2016-09-26
| | | | | | | May help avoid some correlations. Once there are many servers, will spread the load out amoung them. This commit was sponsored by Ethan Aubin.
* prep release0.20160922Joey Hess2016-09-22
|
* change backup log format so it can also log when backup of a key was skippedJoey Hess2016-09-22
| | | | | | | | This will be used later when keysafe --autostart prompts if the user wants to back up their gpg key. Making the change now before the backup log format gets frozen. This commit was sponsored by Josh Taylor on Patreon.
* Added --autostart mode and install FDO autostart fileJoey Hess2016-09-22
| | | | | | | | | | | | | | | | | | | | --autostart mode currently only uploads queued keys, but it will later be expanded to do more. Including checking the BackupRecord for problems when necessary. The autostart file is installed by keysafe --backup, so that when keysafe is installed with stack, and used, it will make sure it autostarts in the future. The autostart file is installed by the Makefile too. This will later let --autostart check for keys that have not been backed up and prompt about backing them up. This way, the user won't need to remember to run keysafe to back things up. Reused Utility.FreeDesktop from git-annex, and had to add some stuff it depends on. This commit was sponsored by Fernando Jimenez on Patreon.
* Added --backup-server and --restore-serverJoey Hess2016-09-15
| | | | | | To aid in backing up keysafe servers with minimal information leakage. This commit was sponsored by Andrea Rota.
* releasing package keysafe version 0.201609140.20160914Joey Hess2016-09-14
|
* Store information about backed up keys in ~/.keysafe/backup.logJoey Hess2016-09-14
| | | | | | | | This can be deleted by the user at any time, but it's useful in case a server is known to be compromised, or a problem is found with keysafe's implementation that makes a backup insecure. This commit was sponsored by Nick Daly on Patreon.
* use multiple threads for chaffingJoey Hess2016-09-14
|
* Added --chaff mode which uploads random junk to servers.Joey Hess2016-09-14
| | | | | | | | This is useful both to test the server throttling of uploads, and to make it harder for servers to know if an object actually contains secret key information. This commit was sponsored by Brock Spratlen on Patreon.
* made fallback request queue fairJoey Hess2016-09-13
| | | | | | | | Once on the queue, requests should not need to contend with other requests that are not on the queue, so added a fallback request bucket. tokenBucketWait is not fair, so ensure FIFO processing of the queue by using a FairRWLock.
* use fast-logger for better loggingJoey Hess2016-09-13
|
* fix pointer to bugJoey Hess2016-09-13
|
* implemented dynamic rate limitingJoey Hess2016-09-13
|
* improved rate limiterJoey Hess2016-09-13
| | | | | Now caps total request rate even if attacker is willing to burn infinite CPU on PoW.
* adding some server disk usage tuning optionsJoey Hess2016-09-13
|
* refactorJoey Hess2016-09-12
|
* implement client-server Proof Of WorkJoey Hess2016-09-12
| | | | | | | | | | | | | | | | | | | Mashed up a argon2-based PoW with token buckets and bloom filters. This is intended to prevent a few abuses including: * Using a keysafe server for general file storage, by storing a whole lot of chunks. * An attacker guessing names that people will use, and uploading junk to keysafe servers under those names, to make it harder for others to use keysafe later. * An attacker trying to guess the names used for objects on keysafe servers in order to download them and start password cracking. (As a second level of defense, since the name generation hash is expensive already.) Completely untested, but it builds! This commit was sponsored by Andreas on Patreon.
* new moduleJoey Hess2016-09-12
|
* Fix bug that prevented keysafe --server from running when there was no ↵Joey Hess2016-09-01
| | | | controlling terminal and zenity was not installed.
* prep releaseJoey Hess2016-08-31
|
* add .desktop fileJoey Hess2016-08-31
|
* add systemd service, makefile, improve INSTALLJoey Hess2016-08-31
|
* Added basic test suite.Joey Hess2016-08-30
|
* support .onion addresses for serversJoey Hess2016-08-29
|
* Removed embedded copy of secret-sharing library, since finite-field only ↵Joey Hess2016-08-28
| | | | | | supports prime fields. This caused shares to double in size.
* pin servant to 0.7Joey Hess2016-08-28
| | | | | | 0.8 also works ok. What does not work is leaving it unpinned and letting servant-0.7 be used with servant-server-0.8. That produces strange compile errors, so pin to avoid.
* threaded RTSJoey Hess2016-08-22
|
* added obscurer thread to serverJoey Hess2016-08-22
|
* wire up server to file storageJoey Hess2016-08-22
|
* http client, and --serverJoey Hess2016-08-20
|
* initial http api using servantJoey Hess2016-08-20
|
* add man pageJoey Hess2016-08-19
| | | | | This seems to install, but stack is not copying it out to the home directory. Hmm.
* changelogJoey Hess2016-08-19
|
* rename shard -> shareJoey Hess2016-08-19
| | | | This makes it clearer that it's not a chunk of data, but a Shamir share.
* add support for multiple storage locattionsJoey Hess2016-08-18
| | | | also, server upload queues in ~/.keysafe
* finish cabal fileJoey Hess2016-08-18
|
* drop HumanTimeJoey Hess2016-08-18
|
* save restored secret key to gpg or fileJoey Hess2016-08-17
|
* make storage to use configurable on command lineJoey Hess2016-08-17
|
* addJoey Hess2016-08-17
|
* key selection workingJoey Hess2016-08-16
|
* more command line interface improvementsJoey Hess2016-08-16
|
* improve options to select secret key to backup/restoreJoey Hess2016-08-16
|
* switch to random salt byte to make decryption expensiveJoey Hess2016-08-16
|
* use zxcvbn-c for fairly good password entropy estimationJoey Hess2016-08-16
| | | | | This should be good enough to let the keysafe UI comment on how good a password the user chooses.
* add --gui optionJoey Hess2016-08-12
|
* add readline UIJoey Hess2016-08-12
|
* temporarily inline argon2 haskell bindingsJoey Hess2016-08-12
| | | | | | | Works around bug that prevents the argon2 haskell library from building from source. Revert once that's fixed. I included the text of the LICENSE from argon2 into the two source files.
* option parsingJoey Hess2016-08-12
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-02 14:35:19 +0000