Stone - Encrypt data at rest

December 17, 2018
security cryptography x509 certificates IOT TLS

Stone - Secure your migration to the Cloud

a tool to encrypt data at rest

Stone is a commandline utility to encrypt files in a fast and reliable way. It makes use of OpenSSL, and by enforcing convention over configuration, it allows the reuse of keys generated for different target services with the tool: iron

A good use case for Stone is represented by configuration files with credentials for Cloud services like:

Get the software

How does it work

In order to run stone you should have generated a private key. The recommended way to use the tool is to generate the secret key with iron

How to encrypt

$ stone -e secret-file.txt
$ ls -l
totale 4
-rw-r--r-- 1 paolo paolo 468 dic 18 01:23 secret-file.txt.enc

N.B. the cleartext version of the file gets deleted from the filesystem after the encryption!

How to decrypt

$ stone -d secret-file.txt.enc 
Enter pass phrase for $HOME/.iron/x.service/certs/x.client/x.client.key:
$ ls -l
totale 8
-rw-r--r-- 1 myuser myuser  60 dic 18 01:23 secret-file.txt
-rw-r--r-- 1 myuser myuser 468 dic 18 01:23 secret-file.txt.enc


COMMUNITY EDITION Here you can download a preview of the software, and you have to consider it as a Beta unlicensed version to be used for evaluation. you might considering buying support, for which you are encouraged to reach out