A Go server for two-man rule encryption, requiring multiple delegated keys for decryption and SSH signing.
Red October is a Go server that implements a two-man rule for encryption and decryption. It encrypts data so that decryption requires multiple users to delegate their keys, preventing any single individual from accessing sensitive information. It also functions as an SSH signing oracle, allowing secure authentication without exposing private keys.
Security engineers and DevOps teams who need to enforce strict access controls on sensitive data and SSH keys, particularly in environments requiring audit trails and collaborative approval for decryption.
Developers choose Red October for its robust implementation of the two-man rule, flexible key delegation with time and usage limits, and the unique SSH signing capability that keeps private keys encrypted while still enabling secure remote access.
Go server for two-man rule style file encryption and decryption.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Enforces collaborative decryption by requiring multiple user delegations, preventing solo access to sensitive data, as detailed in the encryption and delegation APIs.
Supports time-bound and usage-limited key delegations with optional labels and user restrictions, allowing precise access management.
Acts as an SSH signing oracle, enabling authentication without exposing private keys, demonstrated in the SSH agent example for remote access.
Allows modification of encryption parameters like owners and labels without decrypting data first, enhancing operational security.
Requires manual TLS certificate generation and server configuration, including setting GODEBUG=x509ignoreCN=0, which adds friction and potential errors.
Relies on Hipchat for notifications, which is deprecated, and lacks modern alerting or integration with tools like Slack or CI/CD pipelines.
The extensive API with many endpoints and complex JSON payloads makes it challenging to implement and debug without deep expertise.
As a self-hosted server, it requires ongoing updates, vault file backups, and monitoring, posing operational burdens for smaller teams.