diff --git a/Makefile b/Makefile index 116ed1fd..6f7e4d53 100644 --- a/Makefile +++ b/Makefile @@ -11,6 +11,7 @@ source: install: mkdir -p ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP} ${DESTDIR}${PREFIX}/bin + install -m 755 src/${APP}-splitkey ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP}-prep ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP}-client ${DESTDIR}${PREFIX}/bin install -m 755 src/${APP}-remote ${DESTDIR}${PREFIX}/bin @@ -30,6 +31,7 @@ install: install -m 755 src/${APP}-xmpp-pass ${DESTDIR}${PREFIX}/bin mkdir -m 755 -p ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}.1.gz ${DESTDIR}${PREFIX}/share/man/man1 + install -m 644 man/${APP}-splitkey.1.gz ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}-prep.1.gz ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}-client.1.gz ${DESTDIR}${PREFIX}/share/man/man1 install -m 644 man/${APP}-remote.1.gz ${DESTDIR}${PREFIX}/share/man/man1 @@ -49,6 +51,7 @@ install: install -m 644 man/${APP}-xmpp-pass.1.gz ${DESTDIR}${PREFIX}/share/man/man1 uninstall: rm -f ${PREFIX}/share/man/man1/${APP}.1.gz + rm -f ${PREFIX}/share/man/man1/${APP}-splitkey.1.gz rm -f ${PREFIX}/share/man/man1/${APP}-prep.1.gz rm -f ${PREFIX}/share/man/man1/${APP}-client.1.gz rm -f ${PREFIX}/share/man/man1/${APP}-remote.1.gz @@ -68,6 +71,7 @@ uninstall: rm -f ${PREFIX}/share/man/man1/${APP}-xmpp-pass.1.gz rm -rf ${PREFIX}/share/${APP} rm -f ${PREFIX}/bin/${APP} + rm -f ${PREFIX}/bin/${APP}-splitkey rm -f ${PREFIX}/bin/${APP}-prep rm -f ${PREFIX}/bin/${APP}-client rm -f ${PREFIX}/bin/${APP}-remote diff --git a/debian/source/include-binaries b/debian/source/include-binaries index 087091f5..b5d4054e 100644 --- a/debian/source/include-binaries +++ b/debian/source/include-binaries @@ -1,4 +1,5 @@ man/freedombone.1.gz +man/freedombone-splitkey.1.gz man/freedombone-prep.1.gz man/freedombone-client.1.gz man/freedombone-remote.1.gz diff --git a/man/freedombone-splitkey.1.gz b/man/freedombone-splitkey.1.gz new file mode 100644 index 00000000..dbf81be8 Binary files /dev/null and b/man/freedombone-splitkey.1.gz differ diff --git a/src/freedombone-splitkey b/src/freedombone-splitkey new file mode 100755 index 00000000..b8f1e994 --- /dev/null +++ b/src/freedombone-splitkey @@ -0,0 +1,139 @@ +#!/bin/bash +# +# .---. . . +# | | | +# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. +# | | (.-' (.-' ( | ( )| | | | )( )| | (.-' +# ' ' --' --' -' - -' ' ' -' -' -' ' - --' +# +# Freedom in the Cloud +# +# A script which splits a user's gpg key into fragments which +# may then be shared + +# To get a random fragment +# get a random fragment +# fragment_files=($FRAGMENTS_DIR/*) +# FRAGMENT_FILE="${files[RANDOM % ${#files[@]}]}" + +# License +# ======= +# +# Copyright (C) 2015 Bob Mottram +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . + +KEY_FRAGMENTS=3 +MY_USERNAME= +MY_EMAIL_ADDRESS= + +function show_help { + echo '' + echo 'freedombone-splitkey -u [username] -n [number of fragments] -e [email address]' + echo '' + exit 0 +} + +while [[ $# > 1 ]] +do +key="$1" + +case $key in + -h|--help) + show_help + ;; + -u|--user) + shift + MY_USERNAME="$1" + ;; + -n|--fragments) + shift + KEY_FRAGMENTS=$1 + ;; + -e|--email) + shift + MY_EMAIL_ADDRESS=$1 + ;; + *) + # unknown option + ;; +esac +shift +done + +if [ ! $MY_USERNAME ]; then + show_help +fi +if [ ! -d /home/$MY_USERNAME ]; then + echo "User $MY_USERNAME does not exist on the system" + exit 7270 +fi + +if [ ! -d /home/$MY_USERNAME/.gnupg ]; then + echo 'No gpg key found' + exit 5393 +fi + +FRAGMENTS_DIR=/home/$MY_USERNAME/.gnupg_fragments +if [ -d $FRAGMENTS_DIR ]; then + exit 0 +fi + +# get the gpg key ID +if [ ! $MY_EMAIL_ADDRESS ]; then + MY_EMAIL_ADDRESS=$MY_USERNAME@$HOSTNAME +fi +KEYID=$(su -c "gpg --list-keys $MY_EMAIL_ADDRESS | grep 'pub '" - \ + $MY_USERNAME | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}') + +# create the key file +KEYS_FILE=/home/$MY_USERNAME/tempdatafile.asc +gpg --output /home/$MY_USERNAME/pubkey.txt --armor --export $KEYID +if [ ! "$?" = "0" ]; then + echo "Unable to extract public key for $KEYID" + exit 7835 +fi +gpg --output /home/$MY_USERNAME/privkey.txt --armor --export-secret-key $KEYID +if [ ! "$?" = "0" ]; then + echo "Unable to extract private key for $KEYID" + exit 7823 +fi +cat /home/$MY_USERNAME/pubkey.txt /home/$MY_USERNAME/privkey.txt > $KEYS_FILE +shred -zu /home/$MY_USERNAME/privkey.txt +shred -zu /home/$MY_USERNAME/pubkey.txt + +# encrypt the keys file with a passphrase +gpg --output $KEYS_FILE.gpg --symmetric $KEYS_FILE +if [ ! "$?" = "0" ]; then + echo "Unable to encrypt the data prior to splitting" + exit 7352 +fi +shred -zu $KEYS_FILE + +# generate fragments +GPG_KEYS_SIZE_BYTES=$(wc -c <"$KEYS_FILE.gpg") +GPG_BYTES_PER_FRAGMENT=$((GPG_KEYS_SIZE_BYTES / KEY_FRAGMENTS)) +GPG_BYTES_PER_FRAGMENT=$((GPG_BYTES_PER_FRAGMENT + 1)) +mkdir -p $FRAGMENTS_DIR +echo "$GPG_BYTES_PER_FRAGMENT / $GPG_KEYS_SIZE_BYTES" +split --bytes=$GPG_BYTES_PER_FRAGMENT $KEYS_FILE.gpg $FRAGMENTS_DIR/data +#chown -R $MY_USERNAME:$MY_USERNAME $FRAGMENTS_DIR +#chmod -R 600 $FRAGMENTS_DIR + +# delete the keys file +shred -zu $KEYS_FILE.gpg + +echo "$KEY_FRAGMENTS key fragments created" + +exit 0