filestore

Documentation

Overview

Package filestore implements a secure passmgr.Store. The contents are stored encrypted in a single file.

Index

• func ChangeKey(store passmgr.Store, newPassphrase string) error
• func Read(filename, passphrase string) (passmgr.Store, error)
• func Write(store passmgr.Store) error

Functions

func ChangeKey

func ChangeKey(store passmgr.Store, newPassphrase string) error

ChangeKey generates a new salt and key for a Store. This function will panic if store was not created by ReadFileStore.

func Read

func Read(filename, passphrase string) (passmgr.Store, error)

Read reads and decrypts the encrypted contents of a Store from the specified file.

The file starts with a magic number to identify the file format version. Currently only the format 'passmgr1' is supported.

 0      7 8                             39 40        51 52           n
+--------+--------------------------------+------------+-----    -----+
|passmgr1|              salt              |   nonce    |  ciphertext  |
+--------+--------------------------------+------------+-----    -----+

passmgr1:   70 61 73 73 6d 67 72 01
salt:       32 byte salt for scrypt key derivation
nonce:      12 byte random nonce for aes-gcm
ciphertext: aes256-gcm encrypted json encoded content of Store

func Write

func Write(store passmgr.Store) error

Write persists a Store to the file it was read from. This function will panic if store was not created by ReadFileStore.