News for hackers. Stuff that matters.

A comment on Show HN: S-Cache – Secure storage for cryptographic secrets, modeled after sudo. Parent comment

Re:Show HN: S-Cache – Secure storage for cryptographic secre... by blendergeek on Friday March 20, 2020 @10:49PM (#22643891)
I'm a little confused here. The author compares S-Cache to 'sudo'. 'sudo' is a command that lets an unprivileged user run a privileged command. S-Cache lets a process access a secret without having to manage it. The process (in a sense) is not _privileged_ enough to see the secret but rather delegates this to S-Cache. The author (as far as I can tell) does not mention the shadow passwords file. Can you explain more?
[ Parent | on HN ]
Re:Show HN: S-Cache – Secure storage for cryptographic secre... by antoncohen on Friday March 20, 2020 @10:56PM (#22643936)
The mention of the shadow file is in the README:

> S-Cache is an SUID-root executable that works by storing the secret in a file that is owned by root and only readable by root. Its security is thus comparable to the security of shadow passwords.

[ Parent | on HN ]
Re:Show HN: S-Cache – Secure storage for cryptographic secre... by blendergeek on Saturday March 21, 2020 @09:14AM (#22646278)
Thank you. I didn't notice that before.
[ Parent | on HN ]