wacryptolib 0.10

Witness Angel Cryptolib

-> Full documentation on READTHEDOCS! <-

Overview

The Witness Angel Cryptolib is a toolkit aimed at handling secure configuration-driven containers, called cryptainers.

By leveraging a flexible JSON-based format called cryptoconf, users can define their own hybrid cryptosystem, recursively combining symmetric cihers, asymmetric ciphers, shared secrets, and data signatures.

Access to the cyptainers is secured by a variety of actors: local device, remote server, trusted third parties…

The decryption process can involve different steps, like entering passphrases, or submitting authorization requests to third parties.

Overall, the lib gathers lots of utilities to generate and store cryptographic keys, encrypt/check/decrypt cryptainers, access webservices and recorder sensors, and help testing other libraries willing to extend these tools.

CLI interface

A command-line interface is available to play with simple cryptainers.

If you didn’t install the library via pip, ensure that “src/” is in your PYTHONPATH environnement variable.

$ python -m wacryptolib --help

$ python -m wacryptolib encrypt -i <data-file> -o <cryptainer-file>

$ python -m wacryptolib decrypt -i <cryptainer-file> -o <data-file>

$ python -m wacryptolib summarize -i <cryptoconf-or-cryptainer>

By default, CLI-generated cryptainers use a simple hard-coded cryptographic conf, using unprotected local keypairs, so they are insecure. Use a –cryptoconf argument during encryption, to specify a config with your own trusted third parties. But note that many cases (accessing remote web gateways, entering passphrases…) are not yet supported by this CLI.