Go to file
Johan Ouwerkerk 035348caa5 Implement encryption/decryption of token secrets
With this change token secrets are encrypted prior to writing them to
storage, and decrypted as and when needed to generate tokens. Additional
validation is performed to verify that token secrets can be decrypted
successfully when loading accounts from storage.

With this change issue #6 should finally be resolved.
2020-04-24 18:01:34 +02:00
.reuse Do not expose Android tooling to *.license files 2020-04-19 20:21:46 +02:00
LICENSES Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00
android Do not expose Android tooling to *.license files 2020-04-19 20:21:46 +02:00
autotests Implement encryption/decryption of token secrets 2020-04-24 18:01:34 +02:00
cmake Add FindSodium cmake script from upstream libsodium 2020-04-23 18:59:17 +02:00
src Implement encryption/decryption of token secrets 2020-04-24 18:01:34 +02:00
.gitignore Add build* directories to .gitignore 2020-04-22 17:27:28 +02:00
.gitlab-ci.yml Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00
CMakeLists.txt Add support for encrypting/decrypting token secrets 2020-04-23 18:59:17 +02:00
COPYING Add license file [skip ci] 2019-03-25 03:32:29 +05:30
CTestConfig.cmake Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00
Messages.sh Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00
README.md Implement encryption/decryption of token secrets 2020-04-24 18:01:34 +02:00
keysmith.svg Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00
org.kde.keysmith.appdata.xml Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00
org.kde.keysmith.desktop Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00
org.kde.keysmith.json Add support for a master key in account storage 2020-04-23 18:59:17 +02:00
org.kde.keysmith.json.license Fix up licensing for REUSE compliance. 2020-04-10 13:34:31 +02:00

README.md

pipeline status

Keysmith

It uses the oath-toolkit provided library liboath to generate the 2FA codes, both TOTP and HOTP based. Currently it is largely untested. From initial rough testing it seems that auto-refreshing of code is not working. Also button to refresh token for HOTP is also dummy at moment.

Some todo items include,

  • QR code scanning
  • Backup and Restore of accounts

This code is largely based on the authenticator-ng application by the Rodney Dawes and Michael Zanetti for the Ubuntu Touch.