descriptionSignature-du-Terroir signs system state
homepage URLhttp://sourceforge.net/projects/signduterre/
ownerR.J.J.H.vanSon@gmail.com
last changeSun, 27 Sep 2009 08:46:31 +0000 (27 10:46 +0200)
content tags
add:
readme
A very simple security application to test for the integrity of files and "states" in a computer installation. signduterre.py constructs a signature of the current system state and checks installation state with a previously made signature. The files are hashed with a passphrase (and salt) to allow detection of compromised systems while running on the same system. The signature checking can be subverted, but the flexibility of signduterre.py and the fact that the output of any command can be tested makes automated root-kit attacks extremely difficult. signduterre.py writes a total SHA-256 hash to STDOUT of all the files and commands entered as arguments. It can also write a hash for each individual file (insecure). The output of a signature can be send to a file and later used to check with --check-file. Hashes are calculated with a hashed salt + passphrase sequence pre-pended to create unpredictable hashes. An attacker can only know when to supply the requested hash values if she knows the passphrase or has copies available of all the tested files and output of commands to calculate the hashes on the fly.
shortlog
2009-09-27 RobRemoved redundant and incorrect character cleaning... master
2009-09-26 Rob van SonOpened release v0.6aRC
2009-09-26 RobByte slice range expression parsing improved, adapted...
2009-09-26 RobByte slice ranges can contain expressions (with --execu...
2009-09-25 Rob(re-)added importing modules in main program
2009-09-23 RobSmall change in HTML layout of signduterre
2009-09-23 RobAdded missing license text to proc_modules and proc_PID
2009-09-22 RobAdded minimal HTML formatting to manual
2009-09-22 RobReorganized proc_PID to use path dependend file system...
2009-09-16 RobRefactoring proc_PID
2009-09-15 Rob van SonDebugging of the use of proc_PID
2009-09-15 RobSome debugging of modules, eg, proc_PID.py
2009-09-15 RobSome debugging of modules, eg, proc_PID.py
2009-09-15 RobSome debugging of modules, eg, proc_PID.py
2009-09-15 RobAdded documentation and example of modules (ie, proc_PI...
2009-09-15 RobAdded documentation and example of modules (ie, proc_PI...
...
heads
8 years ago master