[{"data":1,"prerenderedAt":292},["ShallowReactive",2],{"project-12331915":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":41,"post_text":43,"what":44,"said":80,"maker_in_thread":165,"shape":172,"grid":177,"attempts":254,"same_week":255,"maker_shows":39,"maker_hidden":284,"reader_version":285,"card":286},"12331915","Cryptic","A sensible secret management toolkit and Go library","title","Show HN: Cryptic – A sensible secret management toolkit and Go library","https:\u002F\u002Fgithub.com\u002Fdomodwyer\u002Fcryptic","github.com","domodwyer",1471802341,2016,93,32,410,2264,19,"notable","security_privacy","secret management","library",[21,24,25,26],"go library","credstash alternative","encryption","mixed",-0.308,{"positive":30,"neutral":31,"mixed":32,"critical":31},0,6,2,14,{"privacy":35,"design":37,"idea":38,"docs":40},{"positive":30,"critical":36},4,{"positive":30,"critical":30},{"positive":30,"critical":39},1,{"positive":30,"critical":39},[42,30,30,42,30,42,30,30,30,30,30,42,42,39,30,39,30,39,30,39,30,30,30,39,42,30,42,42,30,30,39,30],3,null,{"problem":45,"audience":43,"pricing":43,"motivation":55,"time_to_build":43,"stack":62,"openness":78,"stage":79,"team_size":79},{"value":46,"source":47,"evidence":48},"Storing and retrieving secrets such as passwords and API keys securely","inferred",[49,51],{"id":50},"post",{"id":52,"by":53,"text":54},"12332124","gernest","I looked through the project and it is cryptic indeed. I will try to digest a little bit for people who aren't familiar with Go and by any chance read the project's README - The…",{"value":56,"source":57,"evidence":58},"Wanted a simple single binary deployment","maker",[59],{"id":60,"by":11,"text":61},"12332548","I'm aware of the context parameter passed to KMS, and it is indeed something I plan on adding - one step at a time! This was largely a side project that's gone quite well so…",[63,70],{"value":64,"source":47,"evidence":65},"Go",[66,67],{"id":52,"by":53,"text":54},{"id":68,"by":11,"text":69},"12332082","They're only there as an easy-to-read example, the library fully supports binary keys if that's what you're getting at?",{"value":71,"source":72,"evidence":73},"Redis backing store","commenter",[74],{"id":75,"by":76,"text":77},"12332375","eropple","So this is a neat idea, because Credstash and Sneaker are certainly not perfect gizmos, but it leads to the turtles problem: how do I securely handle the initial key that's being…","open_source","unknown",{"praise":81,"objections":86,"requests":113,"questions":125,"alternatives":140},[82],{"value":83,"source":72,"evidence":84},"Neat idea and reasonable as a project",[85],{"id":75,"by":76,"text":77},[87,98,106],{"value":88,"source":72,"evidence":89},"Uses passwords as keys without a KDF",[90,94],{"id":91,"by":92,"text":93},"12332044","FiloSottile","This is exactly the use case of https:\u002F\u002Fgithub.com\u002Fgtank\u002Fcryptopasta Although, the only thing I can see it doing wrong is the use of passwords as keys…",{"id":95,"by":96,"text":97},"12332111","tptacek","A secure storage system shouldn't allow passwords as keys. If passwords are a thing that is going to happen, the API should be structured so that those passwords get run through…",{"value":99,"source":72,"evidence":100},"Lacks KMS encryption context and IAM policy management that Credstash offers",[101,102],{"id":75,"by":76,"text":77},{"id":103,"by":104,"text":105},"12332689","ak217","Credstash looks great, but having written something very similar for internal use (a secrets management system using KMS and S3 for use by EC2 instances) I was expecting it to…",{"value":107,"source":72,"evidence":108},"Vault already covers this need",[109],{"id":110,"by":111,"text":112},"12333032","Natales","It's always good to see options out there. But honestly, having being working with Hashicorp's Vault for a while (https:\u002F\u002Fwww.vaultproject.io\u002F) I really don't see the need for…",[114,118],{"value":115,"source":72,"evidence":116},"Support KMS encryption context",[117],{"id":75,"by":76,"text":77},{"value":119,"source":72,"evidence":120},"Document the crypto design",[121],{"id":122,"by":123,"text":124},"12332166","ketralnis","Cool! I've love to hear more about the security and crypto design. I started writing up some questions but after asking so many it feels like I should just check out the code and…",[126,133],{"value":127,"source":72,"evidence":128},"How does it compare to Vault?",[129],{"id":130,"by":131,"text":132},"12331974","RussianCow","I don't know much about secret management. How does this compare to something like Vault? Edit: https:\u002F\u002Fwww.vaultproject.io\u002F",{"value":134,"source":72,"evidence":135},"Can it replace 1Password?",[136],{"id":137,"by":138,"text":139},"12332023","pibefision","Can this be used to replace apps like 1Password for a skilled user?",[141,145,150,154,158],{"value":142,"source":72,"evidence":143},"Credstash",[144],{"id":75,"by":76,"text":77},{"value":146,"source":72,"evidence":147},"Vault",[148,149],{"id":130,"by":131,"text":132},{"id":110,"by":111,"text":112},{"value":151,"source":72,"evidence":152},"Sneaker",[153],{"id":75,"by":76,"text":77},{"value":155,"source":72,"evidence":156},"Keywhiz",[157],{"id":110,"by":111,"text":112},{"value":159,"source":72,"evidence":160},"biscuit",[161],{"id":162,"by":163,"text":164},"12332035","gregwebs","I went with biscuit because it writes to a simple file and I am not worried about updating 2 secrets at once, particularly since I have a different file per app per environment.…",{"comments":36,"answered":32,"key":166},[167,168,169],{"id":60,"text":61},{"id":68,"text":69},{"id":170,"text":171},"12332136","You're absolutely right. PBKDF2 incoming.",{"commenters":173,"max_depth":174,"maker_replies":36,"first_comment_mins":175,"lifespan_hours":176},17,9,11,18,[178,180,182,185,187,189,192,194,197,199,201,203,205,206,209,211,212,213,215,217,219,223,225,228,231,235,237,240,243,246,248,251],[75,30,42,179,76,30],"project\u002Fmixed\u002Fprivacy",[60,30,30,181,11,39],"maker\u002Fneutral\u002Fnone",[183,30,30,184,76,30],"12332551","commenter\u002Fneutral\u002Fnone",[103,30,42,186,104,30],"project\u002Fmixed\u002Fdesign",[188,30,30,184,76,30],"12332799",[190,30,42,191,104,30],"12332901","project\u002Fneutral\u002Fdesign",[193,30,30,184,76,30],"12332960",[195,30,30,196,104,30],"12333012","commenter\u002Fneutral\u002Fdesign",[198,30,30,184,76,30],"12333073",[200,30,30,184,104,30],"12333933",[202,30,30,184,76,30],"12334068",[130,39,42,204,131,30],"project\u002Fneutral\u002Fidea",[137,39,42,204,138,30],[207,39,39,208,96,30],"12332117","project\u002Fcritical\u002Fprivacy",[210,39,30,184,138,30],"12333086",[91,32,39,208,92,30],[68,32,30,181,11,39],[95,32,39,214,96,30],"maker\u002Fcritical\u002Fprivacy",[170,32,30,216,11,39],"maker\u002Fneutral\u002Fprivacy",[218,32,39,214,96,30],"12332144",[220,32,30,221,222,30],"12332116","commenter\u002Fneutral\u002Fprivacy","JshWright",[162,42,30,224,163,30],"other\u002Fneutral\u002Fnone",[226,36,30,224,227,30],"12332726","ique",[110,229,39,230,111,30],5,"project\u002Fcritical\u002Fidea",[232,31,42,233,234,30],"12331992","project\u002Fneutral\u002Fdocs","hamandcheese",[236,31,30,181,11,39],"12332075",[122,238,42,239,123,30],7,"project\u002Fneutral\u002Fprivacy",[241,238,42,239,242,30],"12332832","e12e",[244,238,30,184,245,30],"12334245","voltagex_",[247,238,30,184,242,30],"12335576",[52,249,39,250,53,30],8,"project\u002Fcritical\u002Fdocs",[252,249,30,184,253,30],"12332932","daenney",[],[256,261,266,270,275,279],{"id":257,"name":258,"points":259,"category":260},"12355102","Carbide",628,"dev_tools",{"id":262,"name":263,"points":264,"category":265},"12319661","posio",220,"games",{"id":267,"name":268,"points":269,"category":260},"12342781","Workq",185,{"id":271,"name":272,"points":273,"category":274},"12312196","WebGL Fire Simulation",143,"creative",{"id":276,"name":277,"points":278,"category":260},"12320461","Replify",112,{"id":280,"name":281,"points":282,"category":283},"12311930","save-as-ebook",106,"productivity",false,"v2",{"id":287,"name":5,"line":6,"ai":284,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":288,"top":18,"kw":289,"maker":11,"domain":10,"tier":19,"attempts":30,"strip":290,"url":9,"mix":291,"praise":83,"objection":88,"sub":21},12331915,-0.31,[21,24,25,26],"30030300000331010101000130330010",[30,31,32,31],1794036546905]