mirror of
https://github.com/AGWA/git-crypt.git
synced 2025-12-28 05:33:47 -08:00
3511033f7f
Storing the key name in the key file makes it unnecessary to pass the --key-name option to git-crypt unlock. This breaks compatibility with post-revamp keys. On the plus side, keys are now extensible so in the future it will be easier to make changes to the format without breaking compatibility.
114 lines
3.0 KiB
C++
114 lines
3.0 KiB
C++
/*
|
|
* Copyright 2014 Andrew Ayer
|
|
*
|
|
* This file is part of git-crypt.
|
|
*
|
|
* git-crypt is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* git-crypt is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with git-crypt. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* Additional permission under GNU GPL version 3 section 7:
|
|
*
|
|
* If you modify the Program, or any covered work, by linking or
|
|
* combining it with the OpenSSL project's OpenSSL library (or a
|
|
* modified version of that library), containing parts covered by the
|
|
* terms of the OpenSSL or SSLeay licenses, the licensors of the Program
|
|
* grant you additional permission to convey the resulting work.
|
|
* Corresponding Source for a non-source form of such a combination
|
|
* shall include the source code for the parts of OpenSSL used as well
|
|
* as that of the covered work.
|
|
*/
|
|
|
|
#ifndef GIT_CRYPT_KEY_HPP
|
|
#define GIT_CRYPT_KEY_HPP
|
|
|
|
#include <map>
|
|
#include <functional>
|
|
#include <stdint.h>
|
|
#include <iosfwd>
|
|
#include <string>
|
|
|
|
enum {
|
|
HMAC_KEY_LEN = 64,
|
|
AES_KEY_LEN = 32
|
|
};
|
|
|
|
struct Key_file {
|
|
public:
|
|
struct Entry {
|
|
uint32_t version;
|
|
unsigned char aes_key[AES_KEY_LEN];
|
|
unsigned char hmac_key[HMAC_KEY_LEN];
|
|
|
|
Entry ();
|
|
|
|
void load (std::istream&);
|
|
void load_legacy (uint32_t version, std::istream&);
|
|
void store (std::ostream&) const;
|
|
void generate (uint32_t version);
|
|
};
|
|
|
|
struct Malformed { }; // exception class
|
|
struct Incompatible { }; // exception class
|
|
|
|
const Entry* get_latest () const;
|
|
|
|
const Entry* get (uint32_t version) const;
|
|
void add (const Entry&);
|
|
|
|
void load_legacy (std::istream&);
|
|
void load (std::istream&);
|
|
void store (std::ostream&) const;
|
|
|
|
bool load_from_file (const char* filename);
|
|
bool store_to_file (const char* filename) const;
|
|
|
|
std::string store_to_string () const;
|
|
|
|
void generate ();
|
|
|
|
bool is_empty () const { return entries.empty(); }
|
|
bool is_filled () const { return !is_empty(); }
|
|
|
|
uint32_t latest () const;
|
|
|
|
void set_key_name (const char* k) { key_name = k ? k : ""; }
|
|
const char* get_key_name () const { return key_name.empty() ? 0 : key_name.c_str(); }
|
|
private:
|
|
typedef std::map<uint32_t, Entry, std::greater<uint32_t> > Map;
|
|
enum { FORMAT_VERSION = 2 };
|
|
|
|
Map entries;
|
|
std::string key_name;
|
|
|
|
void load_header (std::istream&);
|
|
|
|
enum {
|
|
HEADER_FIELD_END = 0,
|
|
HEADER_FIELD_KEY_NAME = 1
|
|
};
|
|
enum {
|
|
KEY_FIELD_END = 0,
|
|
KEY_FIELD_VERSION = 1,
|
|
KEY_FIELD_AES_KEY = 3,
|
|
KEY_FIELD_HMAC_KEY = 5
|
|
};
|
|
};
|
|
|
|
enum {
|
|
KEY_NAME_MAX_LEN = 128
|
|
};
|
|
|
|
bool validate_key_name (const char* key_name, std::string* reason =0);
|
|
|
|
#endif
|