Skip to main content

Refkeys: A secure way for sharing secret (key).

Author & Developer: Ravin Kumar

This repository contains a tool for secret-sharing among two parties.

For example, lets say two parties A and B want to share a secret_key, such that only if they both agree than only they should be able to get the secret. Our software generates 3 individual keys, one for each party, and one for the mediator. When these keys are combined then only the secret_key can be revealed.

Advantage of our system:

  • Even though the same secret is shared among G1={a,b,c} and G2={x,y,z}. The beauty of refkeys is that, even if some member of a group tries to contact other group members to generate the secret key, it can not be generated.
  • Only when all parties of G1 agrees than only they can generate the secret_key.

Demonstration for generating individual keys:

import refkeys
key=refkeys.get_keys("secure_key_passed_here")
person1_key=key[0]
person2_key=key[1]
mediator_key=key[2]
## note: person1_key,person2_key,mediator_key are of type-list.

Demonstration for generating individual filekeys:

import refkeys
refkeys.get_keyfiles("secure_key_passed_here","person1_name","person2_name","mediator_name",path="./")
## note: names should be distinct, and mediator name is not mandatory.

Demonstration for generating secret key using individual keys:

import refkeys
....
secret_key=refkeys.combine_keys(person1_key,person2_key,mediator_key)
## note: person1_key,person2_key,mediator_key are of type-list.

Demonstration for generating secret key using filekeys:

import refkeys
....
secret_key=refkeys.combine_keyfiles(person1_key,person2_key,mediator_key)
## note: names should be distinct, and mediator name is not mandatory.

Installation using pip:

pip install refkeys
Copyright (c) 2019 Ravin Kumar
Website: https://mr-ravin.github.io

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation 
files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, 
modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the 
Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the 
Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE 
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR 
COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, 
ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Metadata

Release files for refkeys 0.0.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for refkeys 0.0.2
File Size Uploaded Provenance Actions
refkeys-0.0.2.tar.gz 3.8 kB Without provenance Details for refkeys-0.0.2.tar.gz

Release files / refkeys-0.0.2.tar.gz

Download URL refkeys-0.0.2.tar.gz
Size 3.8 kB
Tags Source
SHA-256 checksum
How to use checksums
7ce89fb9202f18af114098b8d0df7c180e3e98b07453ce0ae13ab5a5ae95547d
BLAKE2b-256 checksum
How to use checksums
8b474b03c5a4bd3fd90e8f453e8998f11cb7061bb822b95358124e20bc0d9f78
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.12.0 pkginfo/1.7.0 requests/2.22.0 setuptools/45.2.0 requests-toolbelt/0.9.1 tqdm/4.31.1 CPython/3.8.10

Security for refkeys 0.0.2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.0.2 This release

1 release file No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page