Skip to content
master
Switch branches/tags
Go to file
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 

README.md

gobox - authenticated encryption CLI

Gobox is a trivial CLI wrapper around the excellent golang.org/x/crypto/nacl library, itself an implementation of djb et al.'s excellent NaCl crypto library.

NaCl implements fast, secure and non-surprising authenticated encryption using either a symmetric key, or a public/private key pair.

Using secretbox, you seal a message using a symmetric key, and open it with the same key.

Using box, you seal a message to a user (with their public key) from you (with your private key). That sealed box can only be opened by that user, if they provide their private key and your public key.

The APIs are deliberately devoid of knobs and settings, allowing only those two operations, seal and open.

Gobox just surfaces two primitives (plus keygen to produce key pairs) to the commandline.

CLI

The tool is about as straightforward as the NaCl box API.

$ gobox
usage: gobox <command> [<flags>] [<args> ...]

Flags:
  --help  Show help.

Commands:
  help [<command>]
    Show help for a command.

  genkey <pubkey> <seckey>
    Generate a key pair and write them to the given files.

  encrypt <pubkey> <seckey> <input-file> <output-file>
    Encrypt a file FROM seckey (you) TO pubkey (peer)

  decrypt <pubkey> <seckey> <input-file> <output-file>
    Decrypt a file FROM pubkey (peer) TO seckey (you)

  sym-encrypt <input-file> <output-file>
    Encrypt a file with a passphrase

  sym-decrypt <input-file> <output-file>
    Decrypt a file with a passphrase

Public key crypto (box)

Generate a keypair

$ gobox keygen alice.pub alice.sec

Encrypt a file

$ echo "Eve is listening" >plaintext
$ gobox encrypt bob.pub alice.sec plaintext ciphertext

Decrypt a file

$ gobox decrypt alice.pub bob.sec ciphertext plaintext
$ cat plaintext
Eve is listening

Symmetric crypto (secretbox)

Encrypt a file

$ echo "Eve is listening" >plaintext
$ gobox sym-encrypt plaintext ciphertext

Decrypt a file

$ gobox sym-decrypt ciphertext plaintext
$ cat plaintext
Eve is listening

About

Trivial CLI wrapper around go.crypto/nacl/box. Easy secure public key authenticated encryption.

Resources

License

Releases

No releases published

Packages

No packages published

Languages