[BACK]Return to Keyring.pm CVS log [TXT][DIR] Up to [local] / palm / Palm-Keyring / lib / Palm

Diff for /palm/Palm-Keyring/lib/Palm/Keyring.pm between version 1.12 and 1.19

version 1.12, 2007/01/28 00:18:46 version 1.19, 2007/01/31 04:17:15
Line 1 
Line 1 
 # Palm::Keyring.pm  package Palm::Keyring;
   
   # $RedRiver: Keyring.pm,v 1.18 2007/01/30 05:18:06 andrew Exp $
 #  #
 # Perl class for dealing with Keyring for Palm OS databases.  # Perl class for dealing with Keyring for Palm OS databases.
 #  #
 #       Copyright (C) 2004, Andrew Fresh  
 #       You may distribute this file under the terms of the Artistic  
 #       License, as specified in the README file distributed with the p5-Palm distribution.  
 #  
 #   This started as Memo.pm, I just made it work for Keyring.  #   This started as Memo.pm, I just made it work for Keyring.
 #  
 # $RedRiver: Keyring.pm,v 1.11 2007/01/27 23:59:29 andrew Exp $  
   
 use strict;  use strict;
 package Palm::Keyring;  use warnings;
 use Palm::Raw();  use Carp;
 use Palm::StdAppInfo();  
 use vars qw( $VERSION @ISA );  
   
   use base qw/ Palm::StdAppInfo /;
   
 use Digest::MD5 qw(md5);  use Digest::MD5 qw(md5);
 use Crypt::DES;  use Crypt::DES;
   use Readonly;
   
 use constant ENCRYPT    =>  1;  Readonly my $ENCRYPT    => 1;
 use constant DECRYPT    =>  0;  Readonly my $DECRYPT    => 0;
 use constant MD5_CBLOCK => 64;  Readonly my $MD5_CBLOCK => 64;
 my $kSaltSize = 4;  Readonly my $kSalt_Size => 4;
   Readonly my $EMPTY      => q{};
   Readonly my $SPACE      => q{ };
   Readonly my $NULL       => chr 0;
   
   
 # One liner, to allow MakeMaker to work.  # One liner, to allow MakeMaker to work.
 $VERSION = do { my @r = (q$Revision$ =~ /\d+/g); sprintf "%d."."%02d" x $#r, @r };  our $VERSION = 0.92;
   
 @ISA = qw( Palm::StdAppInfo Palm::Raw );  sub new {
       my $classname = shift;
       my $pass      = shift;
   
 =head1 NAME      # Create a generic PDB. No need to rebless it, though.
       my $self = $classname->SUPER::new(@_);
   
 Palm::Keyring - Handler for Palm Keyring databases.      $self->{'name'}    = 'Keys-Gtkr';    # Default
       $self->{'creator'} = 'Gtkr';
       $self->{'type'}    = 'Gkyr';
   
 =head1 SYNOPSIS      # The PDB is not a resource database by
       # default, but it's worth emphasizing,
       # since MemoDB is explicitly not a PRC.
       $self->{'attributes'}{'resource'} = 0;
   
         use Palm::PDB;      # Initialize the AppInfo block
         use Palm::Keyring;      $self->{'appinfo'} = {};
         my $pdb = new Palm::PDB;  
         $pdb->Load($file);  
         foreach my $record (@{ $pdb->{'records'} }) {  
                 print "$record->{'plaintext'}->{'name'}\n";  
         }  
         $pdb->Decrypt($password);  
         # do something with the decrypted parts  
   
 =head1 DESCRIPTION      # Add the standard AppInfo block stuff
       Palm::StdAppInfo::seed_StdAppInfo( $self->{'appinfo'} );
   
 The Keyring PDB handler is a helper class for the Palm::PDB package. It      # Set the version
 parses Keyring for Palm OS databases.  See      $self->{'version'} = 4;
 L<http://gnukeyring.sourceforge.net/>.  
   
 It has the standard Palm::PDB methods with 2 additional public methods.      if ( defined $pass ) {
 Decrypt and Encrypt.          $self->Password($pass);
       }
   
 It currently supports the v4 Keyring databases.  The v5 databases from the pre-release keyring-2.0 are not supported.      return $self;
   }
   
 =cut  sub import {
       Palm::PDB::RegisterPDBHandlers( __PACKAGE__, [ 'Gtkr', 'Gkyr' ], );
       return 1;
   }
   
 =head2 new  sub ParseRecord {
       my $self     = shift;
   
         $pdb = new Palm::Keyring([$password]);      my $rec = $self->SUPER::ParseRecord(@_);
   
 Create a new PDB, initialized with the various Palm::Keyring fields      # skip the 0 record that holds the password
 and an empty record list.      return $rec if ! exists $self->{'records'};
       return $rec if ! exists $rec->{'data'};
   
 Use this method if you're creating a Keyring PDB from scratch otherwise you      my ( $name, $encrypted ) = split /$NULL/xm, $rec->{'data'}, 2;
 can just use Palm::PDB::new().  
   
 =cut      return $rec if ! $encrypted;
       delete $rec->{'data'};
       $rec->{'name'} = $name;
       $rec->{'encrypted'} = $encrypted;
   
 sub new      return $rec;
 {  }
         my $classname   = shift;  
         my $pass = shift;  
   
         # Create a generic PDB. No need to rebless it, though.  sub PackRecord {
         my $self        = $classname->SUPER::new(@_);      my $self = shift;
       my $rec  = shift;
   
         $self->{name} = "Keys-Gtkr";    # Default      my $rec0_id = $self->{'records'}->[0]->{'id'};
         $self->{creator} = "Gtkr";  
         $self->{type} = "Gkyr";  
         # The PDB is not a resource database by  
         # default, but it's worth emphasizing,  
         # since MemoDB is explicitly not a PRC.  
         $self->{attributes}{resource} = 0;  
   
         # Initialize the AppInfo block      if ($rec->{'encrypted'} && ! $rec->{'id'} == $rec0_id) {
         $self->{appinfo} = {};          $rec->{'data'} = join $NULL, $rec->{'name'}, $rec->{'encrypted'};
           delete $rec->{'name'};
           delete $rec->{'encrypted'};
       }
   
         # Add the standard AppInfo block stuff      return $self->SUPER::PackRecord($rec, @_);
         &Palm::StdAppInfo::seed_StdAppInfo($self->{appinfo});  }
   
         # Set the version  sub Encrypt {
         $self->{version} = 4;      my $self = shift;
       my $rec  = shift;
       my $data = shift;
       my $pass = shift || $self->{'password'};
   
         # Give the PDB the first record that will hold the encrypted password      if ( ! $pass) {
         $self->{records} = [ $self->new_Record ];          croak("'password' not set!\n");
       }
   
         if (defined $pass) {      if ( ! $rec) {
                 $self->Encrypt($pass);          croak("Needed parameter 'record' not passed!\n");
         }      }
   
         return $self;      if ( ! $data) {
 }          croak("Needed parameter 'data' not passed!\n");
       }
   
 sub import      if ( ! $self->Password($pass)) {
 {          croak("Incorrect Password!\n");
         &Palm::PDB::RegisterPDBHandlers(__PACKAGE__,      }
                 [ "Gtkr", "Gkyr" ],  
                 );  
 }  
   
 =pod      $self->{'digest'} ||= _calc_keys( $pass );
   
 =head2 Load      $data->{'account'}  ||= $EMPTY;
       $data->{'password'} ||= $EMPTY;
       $data->{'notes'}    ||= $EMPTY;
   
         $pdb->Load($filename[, $password]);      my %Modified;
       my ($day, $month, $year) = (localtime)[3,4,5];
       $year -= 4;
       $month++;
   
 Overrides the standard Palm::Raw Load() to add      my $p = $day | ($month << 5) | ($year << 9);
 $record->{'plaintext'}->{'name'} and      my $packeddate = pack 'n', $p;
 $record->{'encrypted'} fields.  
 $record->{'plaintext'}->{'name'} holds the name of the record,  
 $record->{'encrypted'} is the encrypted information in the PDB.  
   
 It also takes an additional optional parameter, which is the password to use to      my $plaintext = join $NULL,
 decrypt the database.          $data->{'account'}, $data->{'password'}, $data->{'notes'}, $packeddate;
   
 See Decrypt() for the additional fields that are available after decryption.      my $encrypted = _crypt3des( $plaintext, $self->{'digest'}, $ENCRYPT );
   
 =cut      return if ! $encrypted;
   
 sub Load      $rec->{'attributes'}{'Dirty'} = 1;
 {      $rec->{'attributes'}{'dirty'} = 1;
         my $self     = shift;      $rec->{'name'}    ||= $data->{'name'};
         my $filename = shift;      $rec->{'encrypted'} = $encrypted;
         my $password = shift;  
   
         $self->{'appinfo'} = {};      return 1;
         $self->{'records'} = [];  }
         $self->SUPER::Load($filename);  
   
         foreach my $record (@{ $self->{records} }) {  sub Decrypt {
                 next unless exists $record->{data};      my $self = shift;
                 my ($name, $encrypted) = split /\000/, $record->{data}, 2;      my $rec  = shift;
                 next unless $encrypted;      my $pass = shift || $self->{'password'};
                 $record->{plaintext}->{name} = $name;  
         $record->{encrypted} = $encrypted;  
         }  
   
         return $self->Decrypt($password) if defined $password;      if ( ! $pass) {
           croak("'password' not set!\n");
       }
   
         1;      if ( ! $rec) {
 }          croak("Needed parameter 'record' not passed!\n");
       }
   
 =pod      if ( ! $self->Password($pass)) {
           croak("Invalid Password!\n");
       }
   
 =head2 Write      if ( ! $rec->{'encrypted'} ) {
           croak("No encrypted content!");
       }
   
         $pdb->Write($filename[, $password]);      $self->{'digest'} ||= _calc_keys( $pass );
   
 Just like the Palm::Raw::Write() but encrypts everything before saving.      my $decrypted =
           _crypt3des( $rec->{'encrypted'}, $self->{'digest'}, $DECRYPT );
       my ( $account, $password, $notes, $packeddate ) = split /$NULL/xm,
             $decrypted, 4;
   
 Also takes an optional password to encrypt with a new password, not needed      my %Modified;
 unless you are changing the password.      if ($packeddate) {
           my $u = unpack 'n', $packeddate;
           my $year  = (($u & 0xFE00) >> 9) + 4; # since 1900
           my $month = (($u & 0x01E0) >> 5) - 1; # 0-11
           my $day   = (($u & 0x001F) >> 0);     # 1-31
   
 =cut          %Modified = (
               year   => $year,
               month  => $month || 0,
               day    => $day   || 1,
           );
       }
   
 sub Write      return {
 {          name     => $rec->{'name'},
         my $self = shift;          account  => $account,
         my $filename = shift;          password => $password,
         my $password = shift;          notes    => $notes,
           date     => \%Modified,
       };
   }
   
         $self->Encrypt($password) || return undef;  sub Password {
         return $self->SUPER::Write($filename);      my $self = shift;
       my $pass = shift || $self->{'password'};
       my $new_pass = shift;
   
       if (! exists $self->{'records'}) {
           # Give the PDB the first record that will hold the encrypted password
           $self->{'records'} = [ $self->new_Record ];
   
           return $self->_password_update($pass);
       }
   
       if ($new_pass) {
           my @accts = ();
           foreach my $i (0..$#{ $self->{'records'} }) {
               if ($i == 0) {
                   push @accts, undef;
                   next;
               }
               my $acct = $self->Decrypt($self->{'records'}->[$i], $pass);
               if ( ! $acct ) {
                   croak("Couldn't decrypt $self->{'records'}->[$i]->{'name'}");
               }
               push @accts, $acct;
           }
   
           if ( ! $self->_password_update($new_pass)) {
               croak("Couldn't set new password!");
           }
           $pass = $new_pass;
   
           foreach my $i (0..$#accts) {
               next if $i == 0;
               $self->Encrypt($self->{'records'}->[$i], $accts[$i], $pass);
           }
       }
   
       return $self->_password_verify($pass);
 }  }
   
 =pod  sub _calc_keys {
       my $pass = shift;
       if (! defined $pass) { croak('No password defined!'); };
   
 =head2 Encrypt      my $digest = md5($pass);
   
         $pdb->Encrypt([$password]);      my ( $key1, $key2 ) = unpack 'a8a8', $digest;
   
 Encrypts the PDB, either with the password used to decrypt or create it, or      #--------------------------------------------------
 optionally with a password that is passed.      # print "key1: $key1: ", length $key1, "\n";
       # print "key2: $key2: ", length $key2, "\n";
       #--------------------------------------------------
   
 See Decrypt() for an what plaintext fields are available to be encrypted.      $digest = unpack 'H*', $key1 . $key2 . $key1;
   
 =cut      #--------------------------------------------------
       # print "Digest: ", $digest, "\n";
       # print length $digest, "\n";
       #--------------------------------------------------
   
 sub Encrypt      return $digest;
 {  }
         my $self = shift;  
         my $pass = shift;  
   
         if ($pass) {  sub _password_verify {
                 unless (exists $self->{'records'}->[0]->{'data'} &&      my $self = shift;
                     $self->_keyring_verify($pass) ) {      my $pass = shift;
                         # This would encrypt with a new password.  
                         # First decrypting everything with the old password of course.  
                         $self->_keyring_update($pass) || return undef;  
                         $self->_keyring_verify($pass) || return undef;  
                 }  
         }  
   
         $self->{digest} ||= _calc_keys($self->{password});      if (! $pass) { croak('No password specified!'); };
   
         foreach my $record (@{ $self->{records} }) {      if (defined $self->{'password'} && $pass eq $self->{'password'}) {
                 next unless defined $record->{plaintext};          # already verified this password
           return 1;
       }
   
                 my $name        = defined $record->{plaintext}->{name}        ?      # AFAIK the thing we use to test the password is
                         $record->{plaintext}->{name}        : '';      #     always in the first entry
                 my $account     = defined $record->{plaintext}->{account}     ?      my $data = $self->{'records'}->[0]->{'data'};
                         $record->{plaintext}->{account}     : '';  
                 my $password    = defined $record->{plaintext}->{password}    ?  
                         $record->{plaintext}->{password}    : '';  
                 my $description = defined $record->{plaintext}->{description} ?  
                         $record->{plaintext}->{description} : '';  
                 my $extra       = '';  
   
                 my $plaintext = join("\000", $account, $password, $description, $extra);      #die "No encrypted password in file!" unless defined $data;
       if ( ! defined $data) { return; };
   
                 my $encrypted = _crypt3des($plaintext, $self->{digest}, ENCRYPT);      $data =~ s/$NULL$//xm;
   
                 $record->{data} = join("\000", $name, $encrypted);      my $salt = substr $data, 0, $kSalt_Size;
         }  
   
         1;      my $msg = $salt . $pass;
   
       $msg .= "\0" x ( $MD5_CBLOCK - length $msg );
   
       my $digest = md5($msg);
   
       if ( $data eq $salt . $digest ) {
   
   # May as well generate the keys we need now, since we know the password is right
           $self->{'digest'} = _calc_keys($pass);
           if ( $self->{'digest'} ) {
               $self->{'password'} = $pass;
               return 1;
           }
       }
       return;
 }  }
   
 =head2 Decrypt  sub _password_update {
   
         $pdb->Decrypt([$password]);      # It is very important to Encrypt after calling this
       #     (Although it is generally only called by Encrypt)
       # because otherwise the data will be out of sync with the
       # password, and that would suck!
       my $self = shift;
       my $pass = shift;
   
 Decrypts the PDB and fills out the rest of the fields available in      if (! defined $pass) { croak('No password specified!'); };
 $record->{'plaintext'}.  
   
 The plaintext should now be this, before encryption or after decryption:      my $salt;
       for ( 1 .. $kSalt_Size ) {
           $salt .= chr int rand 255;
       }
   
         $record->{'plaintext'} = {      my $msg = $salt . $pass;
                 name        => $name,  
                 account     => $account,  
                 password    => $account_password,  
                 description => $description,  
         };  
   
 =cut      $msg .= "\0" x ( $MD5_CBLOCK - length $msg );
   
 sub Decrypt      my $digest = md5($msg);
 {  
         my $self = shift;  
         my $pass = shift;  
   
         if ($pass) {      my $data = $salt . $digest;    # . "\0";
                 $self->_keyring_verify($pass) || return undef;  
         }  
   
         $self->{digest} ||= _calc_keys($self->{password});      # AFAIK the thing we use to test the password is
       #     always in the first entry
       $self->{'records'}->[0]->{'data'} = $data;
   
         foreach my $record (@{ $self->{records} }) {      $self->{'password'} = $pass;
                 next unless defined $record->{data};      $self->{'digest'}   = _calc_keys( $self->{'password'} );
   
                 my ($name, $encrypted) = split /\000/, $record->{data}, 2;      return 1;
                 next unless $encrypted;  }
   
                 $record->{plaintext}->{name} = $name;  sub _crypt3des {
       my ( $plaintext, $passphrase, $flag ) = @_;
   
                 my $decrypted = _crypt3des($encrypted, $self->{digest}, DECRYPT);      $passphrase   .= $SPACE x ( 16 * 3 );
                 my ($account, $password, $description, $extra)      my $cyphertext = $EMPTY;
                       = split /\000/, $decrypted, 4;  
   
                 $record->{plaintext}->{account}     = defined $account     ?      my $size = length $plaintext;
                         $account     : '';  
                 $record->{plaintext}->{password}    = defined $password    ?  
                         $password    : '';  
                 $record->{plaintext}->{description} = defined $description ?  
                         $description : '';  
   
                 #print "Name:      '$name'\n";      #print "STRING: '$plaintext' - Length: " . (length $plaintext) . "\n";
                 #print "Encrypted: '$encrypted' - Length: " . length($encrypted) . "\n";  
                 #print "    Hex:   '" . unpack("H*", $encrypted) . "'\n";  
                 #print "    Binary:'" . unpack("b*", $encrypted) . "'\n";  
                 #print "Decrypted: '$decrypted' - Length: " . length($decrypted) . "\n";  
                 #print "    Hex:   '" . unpack("H*", $decrypted) . "'\n";  
                 #print "    Binary:'" . unpack("b*", $decrypted) . "'\n";  
                 #print "\n";  
                 #print "Extra: $extra\n";  
                 #exit;  
                 #--------------------------------------------------  
                 # print "Account:     $account\n";  
                 # print "Password:    $password\n";  
                 # print "Description: $description\n";  
                 #--------------------------------------------------  
   
         }      my @C;
       for ( 0 .. 2 ) {
           $C[$_] =
             new Crypt::DES( pack 'H*', ( substr $passphrase, 16 * $_, 16 ));
       }
   
         1;      for ( 0 .. ( ($size) / 8 ) ) {
 }          my $pt = substr $plaintext, $_ * 8, 8;
   
 sub _calc_keys          #print "PT: '$pt' - Length: " . length($pt) . "\n";
 {          if (! length $pt) { next; };
         my $pass = shift;          if ( (length $pt) < 8 ) {
         die "No password defined!" unless defined $pass;              if ($flag == $DECRYPT) { croak('record not 8 byte padded'); };
               my $len = 8 - (length $pt);
   
         my $digest = md5($pass);              #print "LENGTH: $len\n";
               #print "Binary:    '" . unpack("b*", $pt) . "'\n";
               $pt .= ($NULL x $len);
   
         my ($key1, $key2) = unpack('a8a8', $digest);              #print "PT: '$pt' - Length: " . length($pt) . "\n";
         #--------------------------------------------------              #print "Binary:    '" . unpack("b*", $pt) . "'\n";
         # print "key1: $key1: ", length $key1, "\n";          }
         # print "key2: $key2: ", length $key2, "\n";          if ( $flag == $ENCRYPT ) {
         #--------------------------------------------------              $pt = $C[0]->encrypt($pt);
               $pt = $C[1]->decrypt($pt);
               $pt = $C[2]->encrypt($pt);
           }
           else {
               $pt = $C[0]->decrypt($pt);
               $pt = $C[1]->encrypt($pt);
               $pt = $C[2]->decrypt($pt);
           }
   
         $digest = unpack('H*', $key1 . $key2 . $key1);          #print "PT: '$pt' - Length: " . length($pt) . "\n";
         #--------------------------------------------------          $cyphertext .= $pt;
         # print "Digest: ", $digest, "\n";      }
         # print length $digest, "\n";  
         #--------------------------------------------------  
   
         return $digest;      $cyphertext =~ s/$NULL+$//xm;
   
       #print "CT: '$cyphertext' - Length: " . length($cyphertext) . "\n";
   
       return $cyphertext;
 }  }
   
 sub _keyring_verify  1;
 {  __END__
         my $self = shift;  
         my $pass = shift;  
   
         die "No password specified!" unless $pass;  =head1 NAME
   
         # AFAIK the thing we use to test the password is  Palm::Keyring - Handler for Palm Keyring databases.
         #     always in the first entry  
         my $data = $self->{records}->[0]->{data};  
         #die "No encrypted password in file!" unless defined $data;  
         return undef unless defined $data;  
   
         $data =~ s/\0$//;  =head1 DESCRIPTION
   
         my $salt = substr($data, 0, $kSaltSize);  The Keyring PDB handler is a helper class for the Palm::PDB package. It
   parses Keyring for Palm OS databases.  See
   L<http://gnukeyring.sourceforge.net/>.
   
         my $msg = $salt . $pass;  It has the standard Palm::PDB methods with 2 additional public methods.
   Decrypt and Encrypt.
   
         $msg .= "\0" x (MD5_CBLOCK - length($msg));  It currently supports the v4 Keyring databases.  The v5 databases from
   the pre-release keyring-2.0 are not supported.
   
         my $digest = md5($msg);  This module doesn't store the decrypted content.  It only keeps it until it
   returns it to you or encrypts it.
   
         if ($data eq $salt . $digest) {  =head1 SYNOPSIS
                 # May as well generate the keys we need now, since we know the password is right  
                 $self->{digest} = _calc_keys($pass);  
                 if ($self->{digest}) {  
                         $self->{password} = $pass;  
                         return 1;  
                 } else {  
                         return undef;  
                 }  
         } else {  
                 return undef;  
         }  
 }  
   
 sub _keyring_update      use Palm::PDB;
 {      use Palm::Keyring;
         # It is very important to Encrypt after calling this  
         #     (Although it is generally only called by Encrypt)      my $pass = 'password';
         # because otherwise the data will be out of sync with the      my $file = 'Keys-Gtkr.pdb';
         # password, and that would suck!      my $pdb  = new Palm::PDB;
         my $self = shift;      $pdb->Load($file);
         my $pass = shift;  
       foreach (0..$#{ $pdb->{'records'} }) {
           next if $_ = 0; # skip the password record
           my $rec  = $pdb->{'records'}->[$_];
           my $acct = $pdb->Decrypt($rec, $pass);
           print $rec->{'name'}, ' - ', $acct->{'account'}, "\n";
       }
   
         die "No password specified!" unless $pass;  =head1 SUBROUTINES/METHODS
   
         # if the database already has a password in it  =head2 new
         if ($self->{records}->[0]->{data}) {  
                 # Make sure everything is decrypted before we update the keyring  
                 $self->Decrypt() || return undef;  
         }  
   
         my $salt;      $pdb = new Palm::Keyring([$password]);
         for (1..$kSaltSize) {  
                 $salt .= chr(int(rand(255)));  
         }  
   
         my $msg = $salt . $pass;  Create a new PDB, initialized with the various Palm::Keyring fields
   and an empty record list.
   
         $msg .= "\0" x (MD5_CBLOCK - length($msg));  Use this method if you're creating a Keyring PDB from scratch otherwise you
   can just use Palm::PDB::new() before calling Load().
   
         my $digest = md5($msg);  =head2 Encrypt
   
         my $data = $salt . $digest;# . "\0";      $pdb->Encrypt($rec, $acct, [$password]);
   
         # AFAIK the thing we use to test the password is  Encrypts an account into a record, either with the password previously
         #     always in the first entry  used, or with a password that is passed.
         $self->{records}->[0]->{data} = $data;  
   
         $self->{password} = $pass;  $rec is a record from $pdb->{'records'} or a newly generated record.
         $self->{digest}   = _calc_keys($self->{password});  $acct is a hashref in the format below.
   
         return 1;      my $acct = {
 }          account  => $account,
           password => $password,
           notes    => $notes,
       };
   
 sub _crypt3des {  =head2 Decrypt
         my ( $plaintext, $passphrase, $flag ) = @_;  
         my $NULL = chr(0);  
   
         $passphrase .= ' ' x (16*3);      my $acct = $pdb->Decrypt($rec[, $password]);
         my $cyphertext = "";  
   
         my $size = length ( $plaintext );  Decrypts the record and returns a hashref for the account as described
         #print "STRING: '$plaintext' - Length: " . length($plaintext) . "\n";  under Encrypt();
   
         my @C;      foreach (0..$#{ $pdb->{'records'}) {
         for ( 0..2 ) {          next if $_ == 0;
                 $C[$_] = new Crypt::DES( pack( "H*", substr($passphrase, 16*$_, 16 )));          my $rec = $pdb->{'records'}->[$_];
         }          my $acct = $pdb->Decrypt($rec[, $password]);
           # do something with $acct
       }
   
         for ( 0 .. (($size)/8)) {  =head2 Password
                 my $pt = substr( $plaintext, $_*8, 8 );  
                 #print "PT: '$pt' - Length: " . length($pt) . "\n";  
                 next unless length($pt);  
                 if (length($pt) < 8) {  
                         die "record not 8 byte padded" if  $flag == DECRYPT;  
                         my $len = 8 - length($pt);  
                         #print "LENGTH: $len\n";  
                         #print "Binary:    '" . unpack("b*", $pt) . "'\n";  
                         $pt .= ($NULL x $len);  
                         #print "PT: '$pt' - Length: " . length($pt) . "\n";  
                         #print "Binary:    '" . unpack("b*", $pt) . "'\n";  
                 }  
                 if ($flag == ENCRYPT) {  
                         $pt = $C[0]->encrypt( $pt );  
                         $pt = $C[1]->decrypt( $pt );  
                         $pt = $C[2]->encrypt( $pt );  
                 } else {  
                         $pt = $C[0]->decrypt( $pt );  
                         $pt = $C[1]->encrypt( $pt );  
                         $pt = $C[2]->decrypt( $pt );  
                 }  
                 #print "PT: '$pt' - Length: " . length($pt) . "\n";  
                 $cyphertext .= $pt;  
         }  
   
         $cyphertext =~ s/$NULL+$//;      $pdb->Password([$password[, $new_password]]);
         #print "CT: '$cyphertext' - Length: " . length($cyphertext) . "\n";  
   
         return $cyphertext;  Either sets the password to be used to crypt, or if you pass $new_password,
 }  changes the password on the database.
   
 1;  If you have created a new $pdb, and you didn't set a password when you
 __END__  called new(), you only need to pass one password and it will set that as
   the password.
   
   If nothing is passed, and there has been a password used before,
   it just verifies that the password was correct.
   
   =head1 DEPENDENCIES
   
   Palm::StdAppInfo
   
   Digest::MD5
   
   Crypt::DES
   
   Readonly
   
   =head1 BUGS AND LIMITATIONS
   
   Once this module is uploaded, you can
   Please report any bugs or feature requests to
   C<bug-palm-keyring at rt.cpan.org>, or through the web interface at
   L<http://rt.cpan.org>.  I will be notified, and then you'll automatically be
   notified of progress on your bug as I make changes.
   
 =head1 AUTHOR  =head1 AUTHOR
   
 Andrew Fresh E<lt>andrew@mad-techies.orgE<gt>  Andrew Fresh E<lt>andrew@mad-techies.orgE<gt>
   
   =head1 LICENSE AND COPYRIGHT
   
   Copyright 2004, 2005, 2006, 2007 Andrew Fresh, All Rights Reserved.
   
   This program is free software; you can redistribute it and/or
   modify it under the same terms as Perl itself.
   
 =head1 SEE ALSO  =head1 SEE ALSO
   
 Palm::PDB(3)  Palm::PDB(3)
Line 461 
Line 523 
   
 The Keyring for Palm OS website:  The Keyring for Palm OS website:
 L<http://gnukeyring.sourceforge.net/>  L<http://gnukeyring.sourceforge.net/>
   
 =cut  
Legend:
Removed from v.1.12  
changed lines
  Added in v.1.19
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>