From 75198873e5775eb284b26133e4ffd8e482ac5cc8 Mon Sep 17 00:00:00 2001 From: PrincessPi3 Date: Thu, 12 Sep 2024 13:29:50 -0600 Subject: [PATCH] updoots and a rename --- README.md | 30 ++++++++++++++++++++++++++++-- hidden.sh => hiddencrypto.sh | 2 +- 2 files changed, 29 insertions(+), 3 deletions(-) rename hidden.sh => hiddencrypto.sh (93%) diff --git a/README.md b/README.md index 77cbfa1..de81639 100644 --- a/README.md +++ b/README.md @@ -1,12 +1,16 @@ # hiddencrypto Silly lil script for using [scrypt](https://github.com/Tarsnap/scrypt), [secure-delete (srm)](https://github.com/BlackArch/secure-delete), and tar to open and close an encrypted (scrypt) and compressed (bz2) and shred (srm) any lingering data immediately. -## Back up your shit +## Back Up Your Shit * This script is probably as unstable as I am and will probably end up nuking your files * If you lose your passphrase or type it in wrong twice on encryption, your data has gone bye bye * For real, back up your shit * Do not trust me or my code +## Important Details +* Each time you encrypt the directory, it will use a brand new passphrase that you input. You can still use the old one, but it is set each time to whatever you enter twice regardless of the previous passphrase +* Back Up Your Shit! This is a completely unforgiving script when it comes to setting the password wrong + ## Usage To install: `sh hidden.sh install` @@ -17,6 +21,28 @@ To encrypt: To decrypt: `sh hidden.sh dec` +**Misc Considerations to Properly Format and Flesh Out Later (maybe lmfao)/Todo** +``` +Shredding the footprint of files moved to the encrypted dir + Shredding empty space on disk // script? +Disk management issues + Automated backup issues: temporarily disable or exempt automated backups + RAID/etc considerations +Manual and secure backups of encrypted data + Use independant passphrases for password failure recovery + Test backups with its passphrase +High-security passphrase generation and storage + Link to excellent passphrase creation guide + Caution to not use password generator on comptuer, instead create manually on PAPER + Write down on paper, no digital files saved anywhere EVER- Physical ONLY + Or just memorize your passphrases lol +Total data descruction by shredding headers and/or encrypted file // script? automate? lol +Potential memory key leaks +Potential OS key leaks +Potential side-channel attacks +Best practice reccomendation to disable networking when using hiddencrypto +``` + ## License Distributed under the [WTFPL Version 2](http://www.wtfpl.net/) [![WTFPL](assets/wtfpl-badge.png)](http://www.wtfpl.net/) -See [assets/COPYING.txt](assets/COPYING.txt) for text \ No newline at end of file +See [assets/COPYING.txt](assets/COPYING.txt) for text diff --git a/hidden.sh b/hiddencrypto.sh similarity index 93% rename from hidden.sh rename to hiddencrypto.sh index c1a24df..9ac01f0 100644 --- a/hidden.sh +++ b/hiddencrypto.sh @@ -58,5 +58,5 @@ elif [ $1 = "install" ]; then echo "Success: Ready to use" else - echo "Usage:\nEncrypt:\n\tsh hidden.sh enc\nDecrypt:\n\tsh hidden.sh dec\nInstall:\n\tsh hidden.sh install" + echo "Usage:\nEncrypt:\n\tsh hiddencrypto.sh enc\nDecrypt:\n\tsh hiddencrypto.sh dec\nInstall:\n\tsh hiddencrypto.sh install" fi