shadow-crypt 3.0.0

Secure password-based file encryption with filename obfuscation
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

//! Binary for listing files encrypted with shadow-crypt.
//!
//! This binary provides the command-line interface for listing encrypted
//! files with their decrypted original filenames (requires the password).
//! With `--no-names` it lists only the obfuscated names and plaintext header
//! metadata, needing no password.

use std::process;

use shadow_crypt_shell::{
    display_error,
    errors::WorkflowError,
    listing::{cli::get_cli_args, file::ListingInput, workflow::run_workflow},
    memory::SecureString,
    password::resolve_password,
};

fn run() -> Result<(), WorkflowError> {
    let args = get_cli_args(std::env::args().collect())?;
    let work_dir = match args.dir {
        Some(dir) => dir,
        None => std::env::current_dir()?,
    };

    // Only decrypting original filenames needs a password; --no-names reads
    // plaintext header metadata without any key derivation.
    let password: Option<SecureString> = if args.no_names {
        None
    } else {
        Some(resolve_password(args.password_file.as_deref())?)
    };

    run_workflow(ListingInput::new(password, work_dir, args.json))?;
    Ok(())
}

fn main() {
    if let Err(error) = run() {
        display_error(&error);
        process::exit(error.exit_code());
    }
}