git-remote-encrypted

KO | EN

gitlite — search

#javascript #hacktoberfest #react #golang #android #linux #java #awesome #cli #awesome-list #pytorch #security #ios #openai

git-remote-encrypted

(★ 8)

No description available.

git-remote-encrypted Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# git-remote-encrypted

This is a monorepo containing several packages which together create an
encrypted git remote strategy called `git-remote-encrypted`.

**WARNING**: This is very early stage code. It contains bugs, the encryption
setup is weak, do not use it for anything which requires high security.

## Architecture

Inspired by
[git-remote-gcrypt](https://spwhitton.name/tech/code/git-remote-gcrypt/)
git-remote-encrypted builds a second, encrypted, repository from the first,
plain text, repository. We'll call these two repositories `source` and
`encrypted`. On `git push`, every [git
object](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects) is encrypted
and then added to the `encrypted` repo. After all the objects have been added,
the `encrypted` repo is then pushed to the designated remote. On `git pull` or
`git fetch`, the `encrypted` repo is pulled, and then any new objects are
decrypted and copied into `source`.

The encryption is deterministic, so if the same git object is encrypted on
two machines, with the same encryption keys, it will produce the same
encrypted value.

The file layout is as follows:

- `source/`
- `source/.git`
- `source/.git/encrypted` - The `encrypted` repo
- `source/.git/encrypted-keys/` - The keys used to encrypt / decrypt

## Packages

This repo contains several packages:

- `git-remote-encrypted` - The git remote helper, this is probably where you
  want to start if you want to experiment with this code.
- `isomorphic-git-remote-encrypted` - An extension to
  [isomorphic-git](https://isomorphic-git.org/) which adds support for
  encrypted remotes
- `git-encrypted` - The core encryption / decryption logic
- `git-remote-helper` - A generic helper to simplify creating git remote
  helpers

## Development

To run this code locally, you need to build the `git-remote-helper` and `git-encrypted` packages first. It seems like with yarn v1 there is no way to specify the build order. Bottom line, this should get you running:

- `yarn` - Install the dependencies for all packages
- `yarn workspace git-remote-helper build` - Build the git-remote-helper package
- `yarn workspace git-encrypted build` - Build the git-encrypted package
- `yarn workspaces run build` - Build all packages

NOTE: Linting is currently broken in the `git-encrypted` package. It seems to
be related to [this issue](https://github.com/formium/tsdx/issues/926) with
tsdx. Until this is resolved, please try to ensure your commits are linted
via your editor (which hopefully works, at least in VSCode).

## Terminology

- `source` - The cleartext repository
- `encrypted` - The repository that contains the encrypted version of the
  objects from `source`
- `encryptedRemote` - The remote repository that `encrypted` is pulled from and
  pushed to

## Encryption Scheme

- Symmetric encryption
- One key to encrypt objects
- One key to encrypt filenames
- The object ID is combined with a salt and hashed to produce an encryption
  nonce
  - Unclear if this is safe or not. Perhaps a more elaborate password
    derivation scheme is required.
  - UPDATE: It [seems](https://github.com/dchest/tweetnacl-js/issues/207)
    that this approach is secure.
- The nonce and object key is used to encrypt the object body
- The same nonce is used to encrypt the filename
- The nonce and encrypted body are combined
  - This is saved into a file with the encrypted filename

git-remote-encrypted

git-remote-encrypted Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

git-remote-encrypted

git-remote-encrypted Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README