Porting TrueCrypt

answered 2014-05-13 14:50:35 +0200

Rolfa
2053 ●28 ●43 ●37

As long as truecrypt is not available for the Jolla, I am using this script to display a password list from an encrypted zip file.

This works without having to decompress the zip to a file first. Of course, to edit the password list, I have to decompress the zip, edit the file, and compress/encrypt it again with zip -e. That's why truecrypt would still be preferable.

#!/bin/bash

# Displays contents of encrypted zip file without extracting it first to a file.
# Note: The password is visible in the process list, so don't use this on multiuser systems.

# Docs/References:
# http://phpunixman.sourceforge.net/index.php/info/pinentry
# http://www.44342.com/linux-f1121-t30154-p1.htm
# https://together.jolla.com/question/1661/gnupg2-unusable-without-pinentry-package-unavailable/

zipfile=pwlist.zip # should only contain textfiles as all are piped through less

if [ ! -r "$zipfile" ]
then
    echo "Error: $zipfile not found or not readable."
    exit 1
fi

PINENTRY_BIN=/usr/local/bin/pinentry

PinEntryDesc="$zipfile"
PinEntryPrompt="Enter Password: "
PinEntryTTY=`tty`
# The following gets the passphrase by sending the SETDESC, SETPROMPT, and GETPIN
# commands to pinentry, and parsing the output.
p=`echo "SETDESC $PinEntryDesc
SETPROMPT $PinEntryPrompt
GETPIN" | $PINENTRY_BIN --lc-ctype="UTF-8" --ttyname="$PinEntryTTY" | sed '/^D/s/^D \(.*\)$/\1/g;/^OK/d' `

if [ "$p" == "" ]
then
    echo "Error: empty password."
    exit 1
fi

case "$p" in
    *"ERR 111"*)
        echo "cancelled"
        exit 1
        ;;
esac

/usr/bin/unzip -P "$p" -p "$zipfile" | /usr/bin/less -M

answered 2014-05-30 14:31:28 +0200

Rolfa
2053 ●28 ●43 ●37

updated 2015-08-04 11:51:59 +0200

What I needed was an encrypted password list on my phone. Meanwhile, I have a better alternative to TrueCrypt: It's a small python script which uses gpg to encrypt/decrypt the file.

• create a new encrypted file: gpgedit.py -c mylist
• edit the file: gpgedit.py -e mylist.gpg
• display the decrypted file: gpgedit.py mylist.gpg. Then type h for help.
• get help about arguments: gpgedit.py -h

gpgedit.py

This has been working now for months without problems.