Home / Golang / Security

🌰 encrypt/decrypt using ssh keys

ssh-vault 🌰 encrypt/decrypt using ssh private keys Documentation https://ssh-vault.com Usage $ ssh-vault -h Example: $ echo "secret" | ssh-vault -u <github.com/user> create
Information
Category: Golang / Security
Watchers: 9
Star: 395
Fork: 27
Last update: Sep 27, 2023
Resource links
https://ssh-vault.com
https://github.com/ssh-vault/ssh-vault

ssh-vault 🌰

Build Status Coverage Status Go Report Card

encrypt/decrypt using ssh private keys

Documentation

https://ssh-vault.com

Usage

$ ssh-vault -h

Example:

$ echo "secret" | ssh-vault -u <github.com/user> create

Installation

Mac OS

brew install ssh-vault

Binaries

Binaries and packages for a variety of platforms are published to Bintray: Download

To download specific version use URL like https://dl.bintray.com/nbari/ssh-vault/ssh-vault_0.12.4_amd64.deb

To download the latest version:

PACKAGING=amd64.deb
LATEST_VERSION=$(curl -w "%{redirect_url}" -o /dev/null -s https://bintray.com/nbari/ssh-vault/ssh-vault/_latestVersion | sed 's|.*/||')
curl -L -O "https://dl.bintray.com/nbari/ssh-vault/ssh-vault_${LATEST_VERSION}_${PACKAGING}"

Compile from source

Setup go environment https://golang.org/doc/install

For example using $HOME/go for your workspace

$ export GOPATH=$HOME/go

Get the code:

$ go get github.com/ssh-vault/ssh-vault

Build by just typing make:

$ cd $GOPATH/src/github.com/ssh-vault/ssh-vault
$ make

Issues

Please feel free to raise any issue, feature requirement or a simple comment here.

12 Open More issues
Closed

use ssh-agent when asked for password

Find a way to use the ssh-agent to obtain the decrypted key in order to avoid typing the password every time a vault needs to be edited/viewed.

Probably is not possible: http://security.stackexchange.com/a/55791/54143

enhancement help wanted Hacktoberfest 
opened Oct 8, 2016 by nbari 8
Closed

Go 1.10.2 build failure for 0.12.3 

==> Cloning https://github.com/ssh-vault/ssh-vault.git
Updating /Users/joe/Library/Caches/Homebrew/ssh-vault--git
git config remote.origin.url https://github.com/ssh-vault/ssh-vault.git
git config remote.origin.fetch +refs/tags/0.12.3:refs/tags/0.12.3
==> Checking out tag 0.12.3
git checkout -f 0.12.3 --
HEAD is now at 33b59a3... prefer the HOME environmental variable
git reset --hard 0.12.3
HEAD is now at 33b59a3 prefer the HOME environmental variable
==> dep ensure -vendor-only
==> go build -ldflags -s -w -X main.version=0.12.3 -o /usr/local/Cellar/ssh-vault/0.12.3/bin/ssh-vault cmd/ssh-vault/main.go
# github.com/ssh-vault/ssh-vault/vendor/github.com/ssh-vault/go-keychain
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:29: cannot use nil as type _Ctype_CFDataRef in return argument
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:36: cannot convert nil to type _Ctype_CFDataRef
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:37: cannot use nil as type _Ctype_CFDataRef in return argument
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:62: cannot convert nil to type _Ctype_CFDictionaryRef
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:63: cannot use nil as type _Ctype_CFDictionaryRef in return argument
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:74: cannot convert &keys[0] (type *_Ctype_CFTypeRef) to type *unsafe.Pointer
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:74: cannot convert &values[0] (type *_Ctype_CFTypeRef) to type *unsafe.Pointer
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:87: cannot use nil as type _Ctype_CFStringRef in return argument
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:90: cannot use nil as type _Ctype_CFStringRef in return argument
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:141: cannot convert &a[0] (type *_Ctype_CFTypeRef) to type *unsafe.Pointer
vendor/github.com/ssh-vault/go-keychain/corefoundation.go:141: too many errors
/usr/local/Homebrew/Library/Homebrew/debrew.rb:11:in `raise'
BuildError: Failed executing: go build -ldflags -s\ -w\ -X\ main.version=0.12.3 -o /usr/local/Cellar/ssh-vault/0.12.3/bin/ssh-vault cmd/ssh-vault/main.go

(doesn't affect Go 1.9.x)

opened Jun 7, 2018 by ilovezfs 7
Closed

Decryption failed, use private key with fingerprint:

when trying to view the content of a vault, if the key doesn't match, prints the default key on the system:

$ ssh-vault view vault.ssh 
Decryption failed, use private key with fingerprint: fd:c9:a5:ab:67:c2:6a:3b:6b:c9:72:d6:32:f8:a8:09
bug fixed 
opened Mar 2, 2017 by nbari 7
Closed

create tests

Protect still on a very early stage, but some test could help to start cleaning, improving the code.

help wanted Hacktoberfest 
opened Oct 7, 2016 by nbari 7
Closed

Review homebrew formula

Hi, the ssh-vault homebrew formula is currently blocking a pull request to update the go formula to 1.13.5. Details here: https://github.com/Homebrew/homebrew-core/pull/47510#issuecomment-565634744

Can someone take a look at why the formula fails on macOS with go 1.13.5, please?

fixed 
opened Dec 13, 2019 by iwittkau 6
Closed

No valid PEM (private key) data found

Hello,

I use the public key of some friend to encrypt some content:

ssh-vault -k ~/.ssh/vault/keys/id_rsa.pub create < QR.jpg > RQ

From the friend's computer:

ssh-vault -o QR.jpg view RQ

Unfortunately, he's got the message No valid PEM (private key) data found

He's got well his private key in ~/.ssh/id_rsa

Thanks for your help.

opened Nov 23, 2018 by faxotherapy 6
Open

Please bump golang.org/x/sys dependency to support build on riscv64-freebsd

Greetings!

Your program currently does not build on riscv64 freebsd as the golang.org/x/sys dependency is too old to support this combination of architecture and operating system. Please bump the dependency to at least version v0.5.0 to fix the build.

opened Mar 9, 2023 by clausecker 1
Open

Can't use Visual Studio Code as an editor

I want to edit a vault using Visual Studio Code. I set the EDITOR environment variable, and run ssh-vault edit, but it causes an error:

% export EDITOR="/usr/local/bin/code --wait"
% ssh-vault edit test.txt                   
Enter the key password (/Users/maxim/.ssh/id_rsa)
fork/exec /usr/local/bin/code --wait: no such file or directory
opened Feb 25, 2023 by maximzasorin 0
Open

Unconventional fingerprint calculation

This is not a bug report, this is a note for any who will try to use this software. And probably a README update request.

I spent about half an hour in trying to figure out what's wrong with my keys, and then realized that you're using some unconventional way to calculate the key fingerprint.

OpenSSH MD5 fingerprint (as it's used in many other software, especially with ssh-* in the name) of test_data/id_rsa.pub is 95:84:27:28:3c:32:9d:80:39:13:8d:cc:90:3e:4b:e8:

wget https://raw.githubusercontent.com/ssh-vault/ssh-vault/bcf687340bba1fbd9cd00672d965d9b501dae259/test_data/id_rsa.pub
ssh-keygen -lf id_rsa.pub -E md5 
4096 MD5:95:84:27:28:3c:32:9d:80:39:13:8d:cc:90:3e:4b:e8 no comment (RSA)

And 55:cd:f2:7e:4c:0b:e5:a7:6e:6c:fc:6b:8e:58:9d:15 is a MD5 hash of binary representation of the same key in PKCS8 format (aka SSH2 format):

ssh-keygen -e -f id_rsa.pub -m pkcs8 | openssl pkey -pubin -outform der | openssl md5 -c
(stdin)= 55:cd:f2:7e:4c:0b:e5:a7:6e:6c:fc:6b:8e:58:9d:15

You wrote a few words about this in this blog post, but as I'm not AWS user I had no idea how these formats differ.

opened Feb 5, 2022 by nsauk 0
Open

Website blocked in India

ssh-vault is amazing software and I love it!

Unfortunately the Indian government is blocking access to https://ssh-vault.com/.

image

Not sure if there is anything you can do, but wanted to let you know.

GitHub isn't blocked so I can still access :)

opened Dec 20, 2021 by yuvipanda 0
Open

unable to use ssh-agent

Reading the #6, it felt that there was some integration with ssh-vault and ssh-agent. I'am wishing that the decryption made with ssh-vault view <a_vault> will occurs without to have to enter the passphrase of my ssh private key.

Is there any chance that it will work ?

Information on my package

ssh -V
  # OpenSSH_8.7p1 Debian-2, OpenSSL 1.1.1l  24 Aug 2021
./ssh-vault -v
  # 0.12.8
opened Dec 1, 2021 by briner 1
Open

Ssh

null

opened Oct 14, 2021 by Strzee 0

Contents

    Rudd-O Small demo utilities that encrypt / decrypt disk files using the NaCL secretbox implementation
    lukeed A snappy and lightweight (259B) utility to encrypt and decrypt values with salt.
    TimothyYe A simple and powerful SSH keys manager
    spatie Encrypt and decrypt data using private/public keys
    ropnop PoC code to extract private keys from Windows 10's built in ssh-agent service
    net-ssh Pure Ruby implementation of an SSH (protocol 2) client
    mcandre a Go port of IOS7Crypt
    EslaMx7 :closed_lock_with_key: Encrypt\Decrypt file(s) using a powerful encryption algorithm (AES 256-bit)
    publiusfederalist Encrypt and decrypt strings using handshake names and their associated keys
    publiusfederalist Send encrypted messages and decrypt them without sharing keys. Built using the Handshake blockchain.
    substack encrypt messages based on ssh public keys with easy import from github
    ierror Central management and deployment for SSH keys
    ghoneycutt Puppet module to manage SSH
    ccontavalli Different agents and different keys for different projects, with ssh.
    ivRodriguezCA Python script to SSH into your jailbroken device, decrypt an iOS App and transfer it to your local machine
    agens-no Sign, verify, encrypt and decrypt using the Secure Enclave
    metaware Underlock makes it dead simple to encrypt and decrypt your data and files. It comes with little to no dependencies and has a very small API surface.
    realrasengan Use nacl (tweetnacl) easily to create public private keypairs to sign, verify, encrypt and decrypt messages.
    luojilab Django model field encrypt/decrypt your data, keep secret in database.
    PrajwalCyberGod This tool will encrypt-decrypt your files and directories
    pojntfx Sign, verify, encrypt and decrypt data with GPG in your browser.
    Share this repo

    Related Repos


    Security
    285
    The SSH directory ✨
    charmbracelet Wishlist The SSH directory ✨ With Wishlist you can have a single entrypoint for multiple SSH endpoints, whether they are Wish apps or not. As a server
     
    Security
    2.3k
    Make your ssh client smarter
    moul A transparent wrapper that adds support for regex, aliases, gateways, dynamic hostnames, graphviz, json output, yaml configuration, and more to SSH.
     
    Security
    1.2k
    Jump host/Jump server without the jump, a.k.a Transparent SSH bastion
    moul sshportal Jump host/Jump server without the jump, a.k.a Transparent SSH bastion Features include: independence of users and hosts, convenient user inv
     
    Security
    1.8k
    A ssh server that knows who you are. $ ssh whoami.filippo.io
    FiloSottile whoami.filippo.io An ssh server that knows who you are. Try it (it's harmless) ssh whoami.filippo.io ED25519 key fingerprint is SHA256:qGAqPqtlvFBCt4
     
    Security
    265
    Programmable SSH frontend
    gliderlabs sshfront A lightweight SSH server frontend where authentication and connections are controlled with command handlers / shell scripts. Using sshfront U
     
    Security
    889
    Run SSH and HTTP(S) on the same port
    jamescun Switcher Switcher is a proxy server which accepts connections and proxies based on which protocol is detected. Currently implemented is: SSH The use c
     
    Security
    162
    SSH over QUIC
    moul quicssh 😄 quicssh is a QUIC proxy that allows to use QUIC to connect to an SSH server without needing to patch the client or the server. Architecture
     
    Security
    562
    The missing reverse proxy for ssh scp
    tg123 SSH Piper SSH Piper works as a proxy-like ware, and route connections by username, src ip , etc. +---------+ +------------------+
     
    Security
    193
    Easy creation of secure SSH configuration for your GitHub account(s)
    dolmen NAME github-keygen - bootstrap your GitHub SSH configuration SYNOPSIS Unix/Linux/MacOS X: git clone https://github.com/dolmen/github-keygen.git cd git
     
    Security
    58
    bring your .bashrc, .vimrc, etc. with you when you ssh
    danrabinowitz Installation Ubuntu (12.04 and 14.04 only): $ sudo add-apt-repository ppa:russell-s-stewart/ppa $ sudo apt-get update $ sudo apt-get install sshrc Ev
     
    Security
    5
    🔧 Golang SSH Keys manipulation library
    moul 🔧 Golang SSH Keys manipulation library
     
    Security
    1.8k
    A curated list of SSH apps, libraries and resources.
    moul Awesome SSH A curated list of SSH apps, libraries and resources. Inspired by the awesome list thing. Please read the contribution guidelines if you wa
     
    Security
    2k
    rtop is an interactive, remote system monitoring tool based on SSH
    rapidloop rtop rtop is a remote system monitor. It connects over SSH to a remote system and displays vital system metrics (CPU, disk, memory, network). No speci
     
    Security
    10
    A teaching mainnet
    notional-labs seahorse seahorse is 369 or so males pumping out 2000 or so young per batch and a teaching project for new validators. We don't have a cla or anything
     
    Security
    16
    Check, exploit, obfuscate, TLS, ACME about log4j2 vulnerability in one Go program.
    For-ACGN Log4Shell Check, exploit, obfuscate, TLS, ACME about log4j2 vulnerability in one Go program. Feature Only one program and easy deployment Support comm