Refkeys: A secure way for sharing secret (key).
Author & Developer: Ravin Kumar
This repository contains a tool for secret-sharing among two parties.
For example, lets say two parties A and B want to share a secret_key, such that only if they both agree than only they should be able to get the secret. Our software generates 3 individual keys, one for each party, and one for the mediator. When these keys are combined then only the secret_key can be revealed.
Advantage of our system:
- Even though the same secret is shared among G1={a,b,c} and G2={x,y,z}. The beauty of refkeys is that, even if some member of a group tries to contact other group members to generate the secret key, it can not be generated.
- Only when all parties of G1 agrees than only they can generate the secret_key.
Demonstration for generating individual keys:
import refkeys
key=refkeys.get_keys("secure_key_passed_here")
person1_key=key[0]
person2_key=key[1]
mediator_key=key[2]
## note: person1_key,person2_key,mediator_key are of type-list.
Demonstration for generating individual filekeys:
import refkeys
refkeys.get_keyfiles("secure_key_passed_here","person1_name","person2_name","mediator_name",path="./")
## note: names should be distinct, and mediator name is not mandatory.
Demonstration for generating secret key using individual keys:
import refkeys
....
secret_key=refkeys.combine_keys(person1_key,person2_key,mediator_key)
## note: person1_key,person2_key,mediator_key are of type-list.
Demonstration for generating secret key using filekeys:
import refkeys
....
secret_key=refkeys.combine_keyfiles(person1_key,person2_key,mediator_key)
## note: names should be distinct, and mediator name is not mandatory.
Installation using pip:
pip install refkeys
Copyright (c) 2019 Ravin Kumar
Website: https://mr-ravin.github.io
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation
files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy,
modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the
Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the
Software.
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Metadata
Release files for refkeys 0.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| refkeys-0.0.2.tar.gz | 3.8 kB | Without provenance | Details for refkeys-0.0.2.tar.gz |
Release files / refkeys-0.0.2.tar.gz
| Download URL | refkeys-0.0.2.tar.gz |
|---|---|
| Size | 3.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7ce89fb9202f18af114098b8d0df7c180e3e98b07453ce0ae13ab5a5ae95547d
|
|
BLAKE2b-256 checksum How to use checksums |
8b474b03c5a4bd3fd90e8f453e8998f11cb7061bb822b95358124e20bc0d9f78
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/1.12.0 pkginfo/1.7.0 requests/2.22.0 setuptools/45.2.0 requests-toolbelt/0.9.1 tqdm/4.31.1 CPython/3.8.10
|
Security for refkeys 0.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.