Would you trust a repository made like this to save your secrets?
1–6 of 6 posts
Re: Would you trust a repository made like this to save your secrets?
#2Hi All,
my intention is to keep my secrets on a nice public repo, what do you think?
Thanks!
Re: Would you trust a repository made like this to save your secrets?
#3Why keep something secret on a public repo? Is that not an oxymoron?
Also, I’m terms of encryption something like age[0] makes it much easier to not shoot yourself in the foot.
Re: Would you trust a repository made like this to save your secrets?
#4What are you using to do the encryption? How hard is the passphrase to crack?
Re: Would you trust a repository made like this to save your secrets?
#5What are you using to do the encryption? How hard is the passphrase to crack?
Looking at the script, a double round with aes-256-cbc [0] is done, moreover the file is hidden among thousands of files.
Like others ciphers it is vulnerable at implementation level, that is a enough long key must be chosen. Maybe the script could be improved adding a passphrase check.
[0]https://github.com/nola-a/jump/blob/f907cffcb08fd96ea91cd7f3...
Re: Would you trust a repository made like this to save your secrets?
#6Why keep something secret on a public repo? Is that not an oxymoron? Also, I’m terms of encryption something like age[0] makes it much easier to not shoot yourself in the foot. [0] https://github.com/FiloSottile/age
Just to be sure that your secrets are reasonably available, always.
(i) GitHub for high availability of the repo, (ii) Openssl, even it is not flawless, it is available everywhere and battle tested (iii) Bash is bash :)