alichtman / deadbolt Goto Github PK

View Code? Open in Web Editor NEW

327.0 327.0 17.0 28.9 MB

Dead-simple file encryption for any OS

License: MIT License

Shell 6.13% HTML 5.13% JavaScript 72.16% CSS 16.58%

aes-256 cryptography encryption encryption-decryption encryption-tool linux macos windows

deadbolt's Introduction

deadbolt's People

Stargazers

Watchers

Forkers

jhar23 thorjeus ocakgun namlee135 reliasoft ramijarrar azurecloudmonk vanting 00secxq marcus-arcadius vimalhydra 5l1v3r1 roblinks tubero64 accubits-nightswatch 0xfoc-eth maxturmult

deadbolt's Issues

Add "Reveal in Folder"

https://github.com/signalapp/Signal-Desktop/blob/e3e25e11441bdc08337d0af5cf4970f61f891c85/app/attachments.js#L265-L269

Example above.

Got error when encrypting or decrypt files with "(" ")" in filename

Hello,

Got the following error message when I'm trying to encrypt or decrypt a file with filename containing "(" AND / OR ")" chars.

Sample: Photos (3)

Encryption was done properly despite the error message, but decrypt was not working at all.

The action “Run AppleScript” encountered an error: “sh: -c: line 0: syntax error near unexpected token `('
sh: -c: line 0: `cd '/Users/...

Thanks

Write password to file, make openSSL read it from file and delete the file

Leaking passwords in command line args is an issue: https://security.stackexchange.com/questions/70911/bash-command-argument-security

Solution: https://unix.stackexchange.com/a/76951

~~But, I'm not thrilled about writing the password to a file... If anyone forensically examines the drive, the files will likely come up.~~

EDIT: Anyone worried about forensic examination of their drive should be using TAILS, Whonix, Qubes, etc.

~~But, assuming any user can see the running processes, the password will be leaked, so I guess that's the lesser of two evils.~~

Switch order of hash and extension

Going to figure out how to make the default opening application this quick action. Then, people will be able to double click on these icons and be prompted for the password for decryption.

brew cask install

Currently set up on my own taps repo.

PR to homebrew: Homebrew/homebrew-cask#81197

Add settings panel for changing the settings w/o directly editing the dotfile

Call writeConfigFileSync() to update config once done.

[Feature Request] MacOS Icon Update

It would be great to update the icon on MacOS so it fits well with the new design standard, at least regarding the shape and size. Currently, it looks pretty off.

Add bettter debug logs, and maybe a way to dump logs?

Make quicklock the default opener for .qlock files

https://stackoverflow.com/a/2976711/8740440

Error on encrypt

hi, i got this issue when i encrypt a file

macOS Right-Click to Encrypt File

An AppleScript extension could be written to enable this.

Convert all logic from AppleScript to Electron app

So, the Automator workflow and app must stay, as those are what allow the "right-click on a file encrypt" and "double click on a file auto-decrypt" features to work, respectively.

They don't need to contain any logic besides "pass args to the electron app".

Custom file icons for .encrypted extension

This is surprisingly difficult...

https://superuser.com/questions/133784/manipulate-mac-os-x-file-icons-from-automator-or-command-line

https://apple.stackexchange.com/questions/6901/how-can-i-change-a-file-or-folder-icon-using-the-terminal

Add support for password hints

Add fixed-size buffer at head of encrypted file for password hint.

Need a UI element, as well.

Remove ZIP if user exits at either of the encryption key prompts

set encryptionKey to the text returned of (display dialog "Enter an encryption password for file: " & fileToBeEncrypted default answer "")

set encryptionKeyConfirmation to the text returned of (display dialog "Enter the password again: " default answer "")

Setup config during the install process

Either prompt user to set the flags upon install or just call safeCreateDefaultConfig() and leave configuration up to those that want to RTFM.

Change plist file to yaml or json

XML sucks.

Prompt user to decide what to do if the hash match on decryption failed

This would make it so that files encrypted by other programs (that didn't include the hash) will be able to be decrypted. This would remove the guarantee that the files are decrypted properly, however.

Write func for exiting after removing the ZIP file

Use it on:

set encryptionKey to the text returned of (display dialog "Enter an encryption password for file: " & fileToBeEncrypted default answer "")

set encryptionKeyConfirmation to the text returned of (display dialog "Enter the password again: " default answer "")

Add autoupdater?

https://github.com/signalapp/Signal-Desktop/tree/development/ts/updater

Design icon for Electron App

Auto-unzip decrypted zip archives

And remove the .zip file. Depends on #1.

Snap for Linux

Please add to snap repository. It's officially supported in Ubuntu 20.04 by default now.

Detect encrypted file with magic bytes instead of extension

➜ echo "QuickLock" | xxd
00000000: 5175 6963 6b4c 6f63 6b0a                 QuickLock.

Add a config file

Read ~/.encrypt-decrypt.conf to set options like:

Remove encrypted file after successful decrypt
Allow changing of .encrypted extension (#3)

Better name for this thing

AppImage for Linux

AppImage for Linux could work across all Linux distributions.

Popular applications as Bitwarden and Joplin (Open Source alternative to EverNote) have begun to offer their app for Linux as an AppImage by default.

For integration with the system, "appimaged" can be installed by users and the instructions for it are very simple.

https://github.com/AppImage/AppImageKit#appimaged-usage

https://www.booleanworld.com/creating-linux-apps-run-anywhere-appimage/

npm install deadbolt-app

Add flag for deleting unencrypted file after encryption

When you Quick Lock a file, it creates a .encrypted file for what you just encrypted, however the original file is still in finder.

Redo all images / demo with new name

Update homebrew cask to install `v1.0.0`

https://github.com/Homebrew/homebrew-cask/blob/010058030d16fa12ceb8232c9b2fc0321541d38b/Casks/deadbolt.rb

Why is `libappindicator3-1` being recommended as a dep for the `.deb` as of `v1.0.0`?

$ sudo apt install deadbolt_1.0.0_amd64.deb
Notice: The following will be installed to satisfy deadbolt:
  libappindicator3-1
============================================================================================================================================
 Removing
============================================================================================================================================
  Package:                                      Version:                                                                             Size:
  gir1.2-ayatanaappindicator3-0.1               0.5.91-1                                                                             33 KB
  libayatana-appindicator3-1                    0.5.91-1                                                                             90 KB
  network-manager-gnome                         1.28.0-1ubuntu1                                                                     2.2 MB
  polychromatic                                 0.8.0                                                                                40 KB
  polychromatic-tray-applet                     0.8.0                                                                                77 KB
  psensor                                       1.1.5-1.3ubuntu2                                                                    378 KB
  remmina                                       1.4.27+dfsg-2                                                                       966 KB
  remmina-plugin-rdp                            1.4.27+dfsg-2                                                                       179 KB
  remmina-plugin-secret                         1.4.27+dfsg-2                                                                        41 KB
  remmina-plugin-vnc                            1.4.27+dfsg-2                                                                        83 KB
  transmission-gtk                              3.00-2.1build1                                                                      1.1 MB
  ubuntu-desktop                                1.497                                                                                55 KB
  ubuntu-desktop-minimal                        1.497                                                                                55 KB
  ubuntu-release-upgrader-gtk                   1:22.10.8                                                                           217 KB
  update-manager                                1:22.10.4                                                                           1.1 MB
  update-notifier                               3.192.59.2                                                                          309 KB

============================================================================================================================================
 Auto-Removing
============================================================================================================================================
  Package:                                      Version:                                                                             Size:
  gir1.2-snapd-2                                1.63-0ubuntu1                                                                        73 KB
  libavahi-ui-gtk3-0                            0.8-6ubuntu1                                                                        122 KB
  libfreerdp-client2-2                          2.8.1+dfsg1-0ubuntu1.1                                                              865 KB
  libminiupnpc17                                2.2.3-1build1                                                                        79 KB
  libnatpmp1                                    20150609-7.1build2                                                                   30 KB
  libvncclient1                                 0.9.13+dfsg-4                                                                       195 KB
  mobile-broadband-provider-info                20220725-1                                                                          544 KB
  polychromatic-cli                             0.8.0                                                                                66 KB
  polychromatic-common                          0.8.0                                                                               1.1 MB
  polychromatic-controller                      0.8.0                                                                               2.4 MB
  psensor-common                                1.1.5-1.3ubuntu2                                                                    221 KB
  python3-colour                                0.1.5-3                                                                              74 KB
  python3-debconf                               1.5.79ubuntu1                                                                        18 KB
  python3-pyqt5.qtsvg                           5.15.7+dfsg-1build1                                                                 157 KB
  python3-pyqt5.qtwebchannel                    5.15.7+dfsg-1build1                                                                  80 KB
  python3-pyqt5.qtwebengine                     5.15.6-1                                                                            702 KB
  remmina-common                                1.4.27+dfsg-2                                                                       1.8 MB
  transmission-common                           3.00-2.1build1                                                                      897 KB
  update-notifier-common                        3.192.59.2                                                                          1.5 MB

============================================================================================================================================
 Installing
============================================================================================================================================
  Package:                                      Version:                                                                             Size:
  libappindicator3-1                            12.10.1+20.10.20200706.1-0ubuntu1                                                    23 KB

============================================================================================================================================
 Upgrading
============================================================================================================================================
  Package:                                      Old Version:                   New Version:                                          Size:
  deadbolt                                      0.1.0                          1.0.0                                                316 KB

============================================================================================================================================
 Summary
============================================================================================================================================
 Remove      16 Packages
 Auto-Remove 19 Packages
 Install      1 Packages
 Upgrade      1 Packages

 Total download size    23 KB
 Disk space to free   17.7 MB

Do you want to continue? [Y/n] ^C
Aborted!

Double click .dbolt file to open in Deadbolt

https://superuser.com/a/1092184

@shobrook There should be some handler for opening a file with deadbolt. (https://www.electronjs.org/docs/api/app#event-open-file-macos)

GCM AuthTag Length Issue

Note that this Node.js version does not verify the length of GCM authentication tags. Such a check must be implemented by applications and is crucial to the authenticity of the encrypted data, otherwise, an attacker can use an arbitrarily short authentication tag to increase the chances of successfully passing authentication (up to 0.39%). It is highly recommended to associate one of the values 16, 15, 14, 13, 12, 8 or 4 bytes with each key, and to only permit authentication tags of that length, see NIST SP 800-38D.

http://doc.codingdict.com/nodejs-ref/crypto.html#crypto_decipher_setauthtag_buffer

brew cask install macOS-quick-lock

https://github.com/Homebrew/brew/blob/master/docs/Formula-Cookbook.md

Going to need to host my own tap at the beginning. https://github.com/Homebrew/brew/blob/master/docs/How-to-Create-and-Maintain-a-Tap.md

brew create https://github.com/alichtman/macOS-encrypt-decrypt-quick-actions/archive/v1.0.tar.gz

Allow changing of encryption extension

Have a default, but allow it to be overridden by an environment variable.

`sendSync` is not a function error when encrypting a file

I guess something changed with the IPC APIs.

Uncaught TypeError: C.sendSync is not a function
    at r.onEncrypt (App.js:49:41)
    at onSubmitWrapper (CryptForm.js:30:4)
    at Object.s (react-dom.production.min.js:14:84)
    at m (react-dom.production.min.js:14:238)
    at react-dom.production.min.js:14:292
    at y (react-dom.production.min.js:15:72)
    at ot (react-dom.production.min.js:52:170)
    at nt (react-dom.production.min.js:51:255)
    at st (react-dom.production.min.js:52:334)
    at mt (react-dom.production.min.js:56:10)

https://www.electronjs.org/docs/latest/tutorial/ipc this probably has an answer.

Notes to self:

Check fix-ipc branch on arctic.

Set custom file icons for encrypted files

macOS

Might have to write a QuickLook plugin. https://developer.apple.com/library/archive/documentation/UserExperience/Conceptual/Quicklook_Programming_Guide/Articles/QLProjectConfig.html#//apple_ref/doc/uid/TP40005020-CH5-SW5

Linux

Windows

Drag file to deadbolt icon should open file in deadbolt

If it's encrypted, open decrypt screen. Otherwise, show encryption screen.

[Feature Request] Password Hints

It would be awesome to have password hints in deadbolt similar to how its implemented in Encrypto Mac App.

Potentially it could be tagged onto the unencrypted file data

`deadbolt` no longer builds

$ npm run build         
npm WARN config tmp This setting is no longer used.  npm stores temporary files in a special
npm WARN config location in the cache, and they are managed by
npm WARN config     [`cacache`](http://npm.im/cacache).

> [email protected] build
> react-scripts build

Creating an optimized production build...
Error: error:0308010C:digital envelope routines::unsupported
    at new Hash (node:internal/crypto/hash:67:19)
    at Object.createHash (node:crypto:133:10)
    at module.exports (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/util/createHash.js:135:53)
    at NormalModule._initBuildHash (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/NormalModule.js:417:16)
    at handleParseError (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/NormalModule.js:471:10)
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/NormalModule.js:503:5
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/NormalModule.js:358:12
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/loader-runner/lib/LoaderRunner.js:373:3
    at iterateNormalLoaders (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/loader-runner/lib/LoaderRunner.js:214:10)
    at iterateNormalLoaders (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/loader-runner/lib/LoaderRunner.js:221:10)
/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/react-scripts/scripts/build.js:19
  throw err;
  ^

Error: error:0308010C:digital envelope routines::unsupported
    at new Hash (node:internal/crypto/hash:67:19)
    at Object.createHash (node:crypto:133:10)
    at module.exports (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/util/createHash.js:135:53)
    at NormalModule._initBuildHash (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/NormalModule.js:417:16)
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/NormalModule.js:452:10
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/webpack/lib/NormalModule.js:323:13
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/loader-runner/lib/LoaderRunner.js:367:11
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/loader-runner/lib/LoaderRunner.js:233:18
    at context.callback (/home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/loader-runner/lib/LoaderRunner.js:111:13)
    at /home/alichtman/Desktop/Development/projects/deadbolt-source-and-packages/deadbolt/node_modules/babel-loader/lib/index.js:59:103 {
  opensslErrorStack: [ 'error:03000086:digital envelope routines::initialization error' ],
  library: 'digital envelope routines',
  reason: 'unsupported',
  code: 'ERR_OSSL_EVP_UNSUPPORTED'
}

This can be fixed by changing package.json to:

 "scripts": {
    "build": "export NODE_OPTIONS=--openssl-legacy-provider; react-scripts build",
    "dist": "rm -rf dist/* && electron-builder",
    "eject": "react-scripts eject",
    "electron-pack": "build --em.main=build/electron.js",
    "electron-start": "electron .",
    "pack": "electron-builder --dir",
    "postinstall": "electron-builder install-app-deps",
    "preelectron-pack": "yarn build",
    "start": "export NODE_OPTIONS=--openssl-legacy-provider; react-scripts start",
    "test": "react-scripts test"
  },

Then there's an error stemming from window.require that I don't have time to debug right now