Path: csiph.com!aioe.org!bofh.it!news.nic.it!robomod From: Joost van =?UTF-8?Q?Baal-Ili=C4=87?= Newsgroups: linux.debian.bugs.dist,linux.debian.devel,linux.debian.maint.python Subject: Bug#1023113: ITP: pwdsphinx -- SPHINX password storage protocol Date: Sun, 30 Oct 2022 12:00:01 +0100 Message-ID: X-Original-To: submit@bugs.debian.org X-Mailbox-Line: From debian-bugs-dist-request@lists.debian.org Sun Oct 30 10:51:19 2022 Old-Return-Path: X-Spam-Flag: NO X-Spam-Score: -3.951 Reply-To: Joost van =?UTF-8?Q?Baal-Ili=C4=87?= , 1023113@bugs.debian.org Resent-To: debian-bugs-dist@lists.debian.org Resent-Cc: debian-devel@lists.debian.org, jdx5yg90@ctrlc.hu, debian-python@lists.debian.org, wnpp@debian.org, Joost van =?UTF-8?Q?Baal-Ili=C4=87?= X-Debian-Pr-Message: report 1023113 X-Debian-Pr-Package: wnpp MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.10.1 (2018-07-13) X-Debian-Message: from BTS X-Mailing-List: archive/latest/1741337 List-ID: List-URL: Approved: robomod@news.nic.it Lines: 47 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Sun, 30 Oct 2022 11:50:48 +0100 X-Original-Message-ID: <20221030105048.GI14893@beskar.mdcc.cx> Xref: csiph.com linux.debian.bugs.dist:1122949 linux.debian.devel:106231 linux.debian.maint.python:14568 Package: wnpp Severity: wishlist Owner: Joost van Baal-Ilić * Package name : pwdsphinx Version : 1.0.6 Upstream Author : Stefan Marsiske * URL : https://github.com/stef/pwdsphinx , https://www.ctrlc.hu/~stef/blog/posts/sphinx.html * License : GPL-3+, CC-BY-SA-4.0 Programming Lang: Python Description : SPHINX password storage protocol SPHINX -- password Store that Perfectly Hides from Itself (No Xaggeration) -- is an information-theoretically secure cryptographic password storage protocol with strong security guarantees, as described in the 2015 paper "Device-Enhanced Password Protocols with Optimal Online-Offline Protection" by Jarecki, Krawczyk, Shirvanian, and Saxena (https://ia.cr/2015/1099). . This package [pwdsphinx] contains a CLI frontend ("sphinx"), a reference server implementation ("oracle") and a python wrapper for the SPHINX protocol. . This package [pwdsphinx-tools] contains 4 simple scripts which - wrap the client to query the master password securely using pinentry: "getpwd", - a tool "exec-on-click" which executes a command on mouse-click, - a tool "type-pwd" that combines the two previous tools to insert a password without using the clipboard, - and a dmenu wrapper "dmenu-sphinx" that uses all of the above to retrieve usernames and passwords for given hosts. Some of these tools can also be used for other password managers, that are using the clipboard to deliver passwords to the UI. I am working on this package at https://salsa.debian.org/debian/pwdsphinx . The package pwdsphinx depends upon python3-securestring, libsphinx0 and libequihash0; these (securestring, libsphinx, libequihash) are in NEW now; ITPs #1023014, #1022862, #1021433. The SPHINX project was funded through the NGI0 PET Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 825310. Bye, Joost