From 257de9c58d9a8826e2bb041ab8eebdbc6f5ba17a Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Tue, 30 Jun 2015 19:27:25 +0100 Subject: [PATCH] Script for splitting the gpg key --- Makefile | 4 + debian/source/include-binaries | 1 + man/freedombone-splitkey.1.gz | Bin 0 -> 762 bytes src/freedombone-splitkey | 139 +++++++++++++++++++++++++++++++++ 4 files changed, 144 insertions(+) create mode 100644 man/freedombone-splitkey.1.gz create mode 100755 src/freedombone-splitkey diff --git a/Makefile b/Makefile index 116ed1fd..6f7e4d53 100644 --- a/Makefile +++ b/Makefile @@ -11,6 +11,7 @@ source: install: mkdir -p ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP} ${DESTDIR}${PREFIX}/bin + install -m 755 src/${APP}-splitkey ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP}-prep ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP}-client ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP}-remote ${DESTDIR}${PREFIX}/bin @@ -30,6 +31,7 @@ install: install -m 755 src/${APP}-xmpp-pass ${DESTDIR}${PREFIX}/bin mkdir -m 755 -p ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}.1.gz ${DESTDIR}${PREFIX}/share/man/man1 + install -m 644 man/${APP}-splitkey.1.gz ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}-prep.1.gz ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}-client.1.gz ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}-remote.1.gz ${DESTDIR}${PREFIX}/share/man/man1 @@ -49,6 +51,7 @@ install: install -m 644 man/${APP}-xmpp-pass.1.gz ${DESTDIR}${PREFIX}/share/man/man1 uninstall: rm -f ${PREFIX}/share/man/man1/${APP}.1.gz + rm -f ${PREFIX}/share/man/man1/${APP}-splitkey.1.gz rm -f ${PREFIX}/share/man/man1/${APP}-prep.1.gz rm -f ${PREFIX}/share/man/man1/${APP}-client.1.gz rm -f ${PREFIX}/share/man/man1/${APP}-remote.1.gz @@ -68,6 +71,7 @@ uninstall: rm -f ${PREFIX}/share/man/man1/${APP}-xmpp-pass.1.gz rm -rf ${PREFIX}/share/${APP} rm -f ${PREFIX}/bin/${APP} + rm -f ${PREFIX}/bin/${APP}-splitkey rm -f ${PREFIX}/bin/${APP}-prep rm -f ${PREFIX}/bin/${APP}-client rm -f ${PREFIX}/bin/${APP}-remote diff --git a/debian/source/include-binaries b/debian/source/include-binaries index 087091f5..b5d4054e 100644 --- a/debian/source/include-binaries +++ b/debian/source/include-binaries @@ -1,4 +1,5 @@ man/freedombone.1.gz +man/freedombone-splitkey.1.gz man/freedombone-prep.1.gz man/freedombone-client.1.gz man/freedombone-remote.1.gz diff --git a/man/freedombone-splitkey.1.gz b/man/freedombone-splitkey.1.gz new file mode 100644 index 0000000000000000000000000000000000000000..dbf81be8dc13f168ea51b9c7516a4803c138ed35 GIT binary patch literal 762 zcmVV4zV;UHyTHxEDLlVjv#({1Q)`=@r$EZ zF~t1+xIYJLLidFDfNn(-M^TcVLVP*Bn8(q>abz3mZ?J>!BS^z<5YTR~RX}H#{%6XL8>=C$u zaE(gH23V~_q942QALi-%tFu*hw!Dm^td;~+IB7lf2=oYd!EG$$Mq&vAcyLz>4@z|4 zYt)eAUKn368f@K>EJOneODW(fRtc=r86W3iP&#>w^bFXRTkbkk#v|mSxM?jVaOQz& zTEQ!0P)2~b)$Cz~-iy4!Kr;sF$fIH=vZz5cjkzNzjIs^#EQf`;Mc4JLWrMr}XB40= zTxSEvEm#sonSsI~FQ*3z2JBUa%3oV}gmmNq@2zoRgb3z&y!SoA^Q{%sDTV9=Yj3&- zcz4n>OBO|BYbOYI$NT*3EFUmBfs8rq83}8V^Bbl~-SgXSFG^lR z5#G2i*`;BfP8S^Kth4=gS`rnqv`G{JfBql9C|cT(-CkX1S}25O^U3V;(uMfR?TN5K zzQeJnKk&2lf^&X_!9mE|iUs*Vz4qSHWIV1|SDPoi#&IsFcE$JsrLiPxk^VfJ`5dO_ z>GGdv^YrN1^P#7IP%j$E1`W3OO8=0C8V#p>sD7`keFWpMZ1hG}2W44l;|>K_hli85 z4`!gO@oqFI%Bf*ZP7O+OYEThjaZqdZBh15uQOG-Yb~~G{v(x2O9L-D)7sh*z2fWEm z{?3`)cv(==-Xz| +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . + +KEY_FRAGMENTS=3 +MY_USERNAME= +MY_EMAIL_ADDRESS= + +function show_help { + echo '' + echo 'freedombone-splitkey -u [username] -n [number of fragments] -e [email address]' + echo '' + exit 0 +} + +while [[ $# > 1 ]] +do +key="$1" + +case $key in + -h|--help) + show_help + ;; + -u|--user) + shift + MY_USERNAME="$1" + ;; + -n|--fragments) + shift + KEY_FRAGMENTS=$1 + ;; + -e|--email) + shift + MY_EMAIL_ADDRESS=$1 + ;; + *) + # unknown option + ;; +esac +shift +done + +if [ ! $MY_USERNAME ]; then + show_help +fi +if [ ! -d /home/$MY_USERNAME ]; then + echo "User $MY_USERNAME does not exist on the system" + exit 7270 +fi + +if [ ! -d /home/$MY_USERNAME/.gnupg ]; then + echo 'No gpg key found' + exit 5393 +fi + +FRAGMENTS_DIR=/home/$MY_USERNAME/.gnupg_fragments +if [ -d $FRAGMENTS_DIR ]; then + exit 0 +fi + +# get the gpg key ID +if [ ! $MY_EMAIL_ADDRESS ]; then + MY_EMAIL_ADDRESS=$MY_USERNAME@$HOSTNAME +fi +KEYID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - \ + $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}') + +# create the key file +KEYS_FILE=/home/$MY_USERNAME/tempdatafile.asc +gpg --output /home/$MY_USERNAME/pubkey.txt --armor --export $KEYID +if [ ! "$?" = "0" ]; then + echo "Unable to extract public key for $KEYID" + exit 7835 +fi +gpg --output /home/$MY_USERNAME/privkey.txt --armor --export-secret-key $KEYID +if [ ! "$?" = "0" ]; then + echo "Unable to extract private key for $KEYID" + exit 7823 +fi +cat /home/$MY_USERNAME/pubkey.txt /home/$MY_USERNAME/privkey.txt > $KEYS_FILE +shred -zu /home/$MY_USERNAME/privkey.txt +shred -zu /home/$MY_USERNAME/pubkey.txt + +# encrypt the keys file with a passphrase +gpg --output $KEYS_FILE.gpg --symmetric $KEYS_FILE +if [ ! "$?" = "0" ]; then + echo "Unable to encrypt the data prior to splitting" + exit 7352 +fi +shred -zu $KEYS_FILE + +# generate fragments +GPG_KEYS_SIZE_BYTES=$(wc -c <"$KEYS_FILE.gpg") +GPG_BYTES_PER_FRAGMENT=$((GPG_KEYS_SIZE_BYTES / KEY_FRAGMENTS)) +GPG_BYTES_PER_FRAGMENT=$((GPG_BYTES_PER_FRAGMENT + 1)) +mkdir -p $FRAGMENTS_DIR +echo "$GPG_BYTES_PER_FRAGMENT / $GPG_KEYS_SIZE_BYTES" +split --bytes=$GPG_BYTES_PER_FRAGMENT $KEYS_FILE.gpg $FRAGMENTS_DIR/data +#chown -R $MY_USERNAME:$MY_USERNAME $FRAGMENTS_DIR +#chmod -R 600 $FRAGMENTS_DIR + +# delete the keys file +shred -zu $KEYS_FILE.gpg + +echo "$KEY_FRAGMENTS key fragments created" + +exit 0