otp: Some base32-decoding fixes to match what Google Authenticator expects.

otp: Fix parsing of Google Authenticator URLs that have multiple arguments.

Command line tool that decrypts an OPVault keychain and dumps it to stdout. To compile: gcc -o opvault opvault.c cJSON.c -lcrypto Usage: ./opvault </path/to/mykeychain.opvault> <password> This is just a proof of concept; I'll be recycling this into proper OPVault support in 1pass later and deleting this tool. This uses OpenSSL's libcrypto for the math instead of all the homegrown crypto this project is otherwise using. I'll probably migrate the rest in this direction, too, since this wasn't as bad as I expected to use and gets you all the package-manager mojo of automatic bug fixes and security patches and shared code, etc. cJSON parses JSON in C. That is from https://github.com/DaveGamble/cJSON An example OPVault keychain from AgileBits is available here: https://cache.agilebits.com/security-kb/

Minor type cleanup ("unsigned char" -> "uint8_t").

Added One Time Password support. This is only for time-based OTP for now ("TOPT" algorithm), but that's more or less what one expects to see in the wild anyhow. This is sort of a placeholder UI until I replace the entire existing UI with something better.

Added initial code for producing time-based One Time Passwords.

Replaced existing HMAC-SHA1 code in pkcs5_pbkdf2.c with my new one. Didn't realize this was already here, doh! It was a good learning experience in any case!

Implemented SHA1Hmac().

Made the SHA1 code more stdint-friendly.

Merge gtkui branch to default.

Closing gtkui branch.

Added some missing categories (US Social Security Numbers and Router logins).

Added some debug code for keypresses.

Updated copyright.

Added experimental support for using a "trusted device." This might be a terrible idea, just experimenting here.

Moved to a more robust GTK UI. This removes the popup windows, in favor of something searchable, etc, but it's not without its problems, too, so it's sitting in branch until I decide I really like it or I should replace it with SDL or something. :) (If someone can figure out how to get the window to steal focus when popped up, that would fix the most egregious issue, but there are other small details that need fixing, too.)

Be more robust about i/o failures to the keychain. (and bail immediately if it's clearly missing.)

Whoops, forgot to remove original code that I was fixing. :)

Fixed driver license dates that might be missing (thanks, Patrick!). Some regions don't have expiring drivers licenses and don't use this field, or maybe might only use some parts (year, month, day). Made this more robust.

Added SWIFT code and PIN fields to bank account menus.

Don't crash if you get one of these "{}" entries that 1Password makes. It looks like some version of 1Password has obsolete entries that still have JSON files listed, but the entirety of the JSON is "{}" ... we now check if we got an empty table back from the Lua JSON parser and treat it as a dead entry.

chdir() to where the binary is running from before doing anything else. This is so we can find our script files, etc, regardless of where the program is run from. Note that this means your 1Password symlink needs to live where the binary does, at least until we let you specify one elsewhere.

Fixed display of credit card expiration date.

Improved, then commented out, some debug output.

Fixed whitespace.

Added favorites submenu.

Whoops, wrong comparison.

Signal catching to force atexit handling.

Pick out the right password when multiple passwords are included. This happens when you update a password field in the official 1Password app, at least on Mac OS X, as I discovered thanks to Heartbleed.

More Powermate stuff: clean up atexit, autodetect devices.

Comment out some debug output.

Forcibly lock keychain on timeout instead of checking timeout on next access.

Hooked up support for a Griffin Powermate. If you have access to one and run the program with --powermate=/dev/whatever, 1pass will accept button presses on the Powermate as if you hit the magic key combo. Also, it will toggle the light on the device to pulse when the keychain is unlocked.

Print a message to stdout at startup, for people that think the app froze up.

Try to get the password window to the top of the z-order.

Added Secure Notes items to menu.

Checked for secure.fields in the wrong place.

Make build.sh a bit more robust.

Commented out a debug string.

Build on Ubuntu 12.04, fix some crash problems

Explicitly link to libX11.

Added LICENSE.txt

Added some keychain lock management.

Added keyhook code, reworked things to use it.

Use luaFatal() if luaL_dofile() explodes.

Fixed crash.

Hook up GTK+ to the build system.

Added dumptable.lua

Whole bunch of GUI work.

Start building in GUI stuff.

Patched to compile on Linux.

Removed dumptable.

Make the app basically useful.

Moved command lines into Lua.

Dump out all the encrypted data.

Cache loaded encryption keys. I'm pretty sure that's a commit message that strikes fear in the hearts of cryptographers everywhere.

Don't need the printf("uhoh")...there's a better error message elsewhere.

Corrected comment. It's basically just moving to Lua as the mainline.

Just use the built-in luaL_openlibs()

Move the mainline into Lua.