PSKeyBase Module

Since the Namespace and Key attributes are stored in Keybase as a random 12-digit value, there needs to be a method to covert the 12-digit value to human readable form.

There are 2 or more files used to maintain 12-digit value to attribute relationship.

The file, KBnamespace.xml is stored in the /keybase/private/<keybaseID> folder. When the client makes changes the data is updated locally and synch'ed with the above keybase folder. Synchronization with the Keybase filesystem is the default, but can be overriden by changing the configuration file. See Set-PSKConfiguration.

For teams the file, KBnamespace-teamname.xml is stored in the /keybase/team/<teamname> folder.

The local copy of the these files is stored in the module root path, as well.

If you are using multiple KeyBase clients on different workstations, the data presented will be the same because the clients populate the hashtable from files that are maintained in the KeyBase filesystem.

Logging to a Web Server will require the following steps.

KV-Encode -entryKey Pode9001 -namespace Web -Team ShareTeam

After KV-Encode completes the clipboard contains the encrypted KV store value and the signature of the keybase account that acquired the KV store value.

In Web Server's Login user name field, the keybase account name is entered and in the password field the user enters ctrl-v to copy the contents of the clipboard into the field.

The Web Server then.

1. Verifies the contents of password field was signed by the keybase account and that the password is correct.

2. On successful validation, the Web Servers then sets a new password for the KV store entry.

For testing purpose, KV-Decode is executed to decrypt and display the value in the clipboard.

KV-Decode
Decrypted Value is: cV}9ZD07z2FuvY&:;CmgX\36).A!8?n4kKf+15yM  Verified: Authored by cadayton (you)  

PS> Add-PSKEncryption -FolderPath test.log

OutPut:
NameSpace                  Team              entryKey                Revison
--------                  ----              --------                -------
TOOLAH-File (749e6f001f41) dayton,dayton     test.log (68a941536733)       1

Encrypt a file within the current working directory and store the decryption token in the KeyBase KV store.

After the file is successfully encrypted, the uncrypted version is removed.

A random decryption token is generated. (Default 20 characters)

The KVstore namespace value will be <hostname>-File and the key will be test.log as shown in the command output. If the contents of a directory is encrypted, the namespace value will be **<hostname-folder> and the Key will the directory path.

On version 1.0.8, -NoKB option bypasses the need for the Keybase client and optionally prompts for a manual passphrase input.

PS> Remove-PSKEncryption -FolderPath test.log.gpg

Output:
Decrypting C:\myfolder\test.log.gpg to C:\myfolder\test.log (Y or N) : Y
KV test.log (b388d70f1c63) removed in NameSpace: TOOLAH-File (6ed05cb2d822)

Prompts for confirmation to decrypt the file and then retrieves the decryption token from the Keybase KV store unless the -NoKB option is set.

Using the -NoKB options requires manual input of the decrypt token

The encrypted file, test.log.gpg is removed.

If the option, -Keep was used above then the encrypted file will not be removed.