main
Commits on Jul 7, 2021
Commits on Apr 9, 2020
Commits on Jun 23, 2017
-
Command line tool that decrypts an OPVault keychain and dumps it to s…
…tdout. To compile: gcc -o opvault opvault.c cJSON.c -lcrypto Usage: ./opvault </path/to/mykeychain.opvault> <password> This is just a proof of concept; I'll be recycling this into proper OPVault support in 1pass later and deleting this tool. This uses OpenSSL's libcrypto for the math instead of all the homegrown crypto this project is otherwise using. I'll probably migrate the rest in this direction, too, since this wasn't as bad as I expected to use and gets you all the package-manager mojo of automatic bug fixes and security patches and shared code, etc. cJSON parses JSON in C. That is from https://github.com/DaveGamble/cJSON An example OPVault keychain from AgileBits is available here: https://cache.agilebits.com/security-kb/
Commits on Jun 18, 2017
-
-
Added One Time Password support.
This is only for time-based OTP for now ("TOPT" algorithm), but that's more or less what one expects to see in the wild anyhow. This is sort of a placeholder UI until I replace the entire existing UI with something better.
-
Replaced existing HMAC-SHA1 code in pkcs5_pbkdf2.c with my new one.
Didn't realize this was already here, doh! It was a good learning experience in any case!
-
-
Commits on Jun 14, 2017
Commits on Dec 17, 2016
Commits on Mar 23, 2016
Commits on Jan 1, 2016
Commits on Nov 9, 2015
-
Added experimental support for using a "trusted device."
This might be a terrible idea, just experimenting here.
Commits on Oct 18, 2015
-
Moved to a more robust GTK UI.
This removes the popup windows, in favor of something searchable, etc, but it's not without its problems, too, so it's sitting in branch until I decide I really like it or I should replace it with SDL or something. :) (If someone can figure out how to get the window to steal focus when popped up, that would fix the most egregious issue, but there are other small details that need fixing, too.)
Commits on Apr 1, 2015
-
Be more robust about i/o failures to the keychain.
(and bail immediately if it's clearly missing.)
Commits on Mar 29, 2015
Commits on Feb 23, 2015
-
Fixed driver license dates that might be missing (thanks, Patrick!).
Some regions don't have expiring drivers licenses and don't use this field, or maybe might only use some parts (year, month, day). Made this more robust.
Commits on Dec 4, 2014
Commits on Jul 9, 2014
-
Don't crash if you get one of these "{}" entries that 1Password makes.
It looks like some version of 1Password has obsolete entries that still have JSON files listed, but the entirety of the JSON is "{}" ... we now check if we got an empty table back from the Lua JSON parser and treat it as a dead entry.
-
chdir() to where the binary is running from before doing anything else.
This is so we can find our script files, etc, regardless of where the program is run from. Note that this means your 1Password symlink needs to live where the binary does, at least until we let you specify one elsewhere.
Commits on May 1, 2014
Commits on Apr 26, 2014
Commits on Apr 19, 2014
-
Pick out the right password when multiple passwords are included.
This happens when you update a password field in the official 1Password app, at least on Mac OS X, as I discovered thanks to Heartbleed.