1 files changed, 52 insertions, 0 deletions

diff --git a/scripts/secret b/scripts/secret
new file mode 100755
index 0000000..14ec2e0
--- /dev/null
+++ b/scripts/secret
@@ -0,0 +1,52 @@
+#!/bin/sh
+
+# Encrypt and decrypt files using a fixed cipher and passphrase.
+# The first line of the (unencrypted) file is considered the "password",
+# the rest can be anything.
+
+# Usage: secret command file
+# Available commands:
+#       clip: copy the secret to clipboard; deleted after 10 seconds
+#       edit: edit or add a file
+#       show: show the full encrypted file
+
+# Requires: openssl, xsel (for clip only)
+
+# ksh completion
+# set -A complete_sel_1 clip edit show
+# set -A complete_sel_2 box/secret
+
+opts="aes-256-cbc -iter 1000"    # options for openssl
+timeout=10                       # timeout for clip, in ms
+editor=${EDITOR:-vi}
+
+if [ -z "$1" ] || [ -z "$2" ]; then
+        echo "usage: secret command file"
+else
+case "$1" in
+        clip)
+                openssl $opts -d < "$2" | head -n 1 | xargs printf "%s" | xsel -ib
+                sleep $timeout && xsel -db &
+                ;;
+        edit)
+                tempfile=$(mktemp)
+                if [ -f "$2" ]; then
+                        openssl $opts -d < "$2" > "$tempfile"
+                fi
+                $editor "$tempfile"
+                read -p "Are you sure? [N/yes] " an
+                if [ "$an" = yes ] || [ "$an" = Yes ] || [ "$an" = YES ]; then
+                        openssl $opts < "$tempfile" > "$2"
+                else
+                        echo "Changes discarded"
+                fi
+                rm "$tempfile"
+                ;;
+        show)
+                openssl $opts -d < "$2"
+                ;;
+        *)
+                echo "$1: not a valid command"
+                ;;
+esac
+fi