]> git.scottworley.com Git - overonion/blob - overonion-make-key
da564ad39227896970b3093a29e75c06ac369ae6
[overonion] / overonion-make-key
1 #!/bin/bash
2
3 ciphers=(
4 bf-cbc bf-cfb bf-ecb bf-ofb
5 cast-cbc cast5-cbc cast5-cfb cast5-ecb cast5-ofb
6 des-cbc des-cfb des-ofb des-ecb
7 des-ede-cbc des-ede des-ede-cfb des-ede-ofb
8 des-ede3-cbc des-ede3 des-ede3-cfb des-ede3-ofb
9 idea-cbc idea-cfb idea-ecb idea-ofb
10 rc2-cbc rc2-cfb rc2-ecb rc2-ofb rc2-64-cbc rc2-40-cbc
11 rc4 rc4-40
12 rc5-cbc rc5-cfb rc5-ecb rc5-ofb
13 aes-128-cbc aes-128-cfb aes-128-cfb1 aes-128-cfb8 aes-128-ecb aes-128-ofb
14 aes-192-cbc aes-192-cfb aes-192-cfb1 aes-192-cfb8 aes-192-ecb aes-192-ofb
15 aes-256-cbc aes-256-cfb aes-256-cfb1 aes-256-cfb8 aes-256-ecb aes-256-ofb
16 )
17
18 umask 077
19
20 random_source="/dev/random"
21 if [[ "$1" == '--make_INSECURE_key' ]];then
22 shift
23 random_source="/dev/urandom"
24 fi
25
26 if (( $# != 1));then
27 echo "usage: overonion-make-key keyfile" >&2
28 exit 1
29 fi
30 keyfile=$1
31 if [[ -e "$keyfile" ]];then
32 echo "That keyfile already exists. I refuse to overwrite it." >&2
33 exit 1
34 fi
35
36 i=0
37 while read -r cipher;do
38 echo -n $'\r'"Generating key $((++i))/${#ciphers[*]}" >&2
39 cat >> "$keyfile" <<< "$cipher $(head -c 99 "$random_source" | base64 --wrap=0 )"
40 done < <( IFS=$'\n'; shuf <<< "${ciphers[*]}"; )
41 echo >&2