scryptutil

README

COMMAND

    scryptutil encrypts and decrypts files.

    Files are encrypted with AES-256 in CTR mode and authenticated with
    HMAC-SHA256. Encryption and HMAC keys are derived from passphrase using
    scrypt key derivation function.

    Usage:

	scryptutil {enc | dec} [infile] [outfile]

    If infile is not given, the program reads from the standard input.
    If outfile is not given, the program writes to the standard output.

    scryptutil is a Go reimplementation of Colin Percival's scrypt utility,
    which is used to encrypt key files for his Tarsnap backup service (see
    http://www.tarsnap.com/scrypt.html). The file format is the same: files
    encrypted by this utility can be decrypted with the original scrypt, and
    vice versa.

INSTALLATION

    $ go get github.com/dchest/scryptutil

BUGS

    Parameters for KDF during encryption are hardcoded to N=2¹⁸, r=8, p=1.

    None of the original scrypt utility flags are supported.

Documentation

Overview

scryptutil encrypts and decrypts files.

Files are encrypted with AES-256 in CTR mode and authenticated with HMAC-SHA256. Encryption and HMAC keys are derived from passphrase using scrypt key derivation function.

Usage:

scryptutil {enc | dec} infile [outfile]

If outfile is not given, the program writes to the standard output.

scryptutil is a Go reimplementation of Colin Percival's scrypt utility, which is used to encrypt key files for his Tarsnap backup service (see http://www.tarsnap.com/scrypt.html). The file format is the same: files encrypted by this utility can be decrypted with the original scrypt, and vice versa.

Notes

Bugs

• Parameters for KDF during encryption are hardcoded to N=2¹⁵, r=8, p=1.

• Passwords are echoed to terminal when entering them.

• None of the original scrypt utility flags are supported.