Reference overview

Interfaces

• SSH agent socket providers

Man pages

• derivepassphrase(1): Derive a strong passphrase, deterministically, from a master secret.
  • derivepassphrase-vault(1): Derive a passphrase using the vault(1) derivation scheme.
  • derivepassphrase-export(1): Export a foreign configuration to standard output.
    • derivepassphrase-export-vault(1): Export a vault-native configuration to standard output.

Modules and packages (API docs)

• derivepassphrase: Work-alike for vault(1) – deterministic, stateless password manager.
  • derivepassphrase.cli: Command-line interface for derivepassphrase.
  • derivepassphrase.exporter: Exporter for other passphrase generator configurations.
    • derivepassphrase.exporter.storeroom: Exporter for the vault “storeroom” configuration format.
    • derivepassphrase.exporter.vault_native: Exporter for the vault native configuration formats (v0.2 and v0.3).
  • derivepassphrase.sequin: Python port of Sequin, a pseudorandom number generator.
  • derivepassphrase.ssh_agent: A bare-bones SSH agent client supporting signing and key listing.
  • derivepassphrase._types: Types used by derivepassphrase.
  • derivepassphrase.vault: Python port of the vault(1) password generation scheme.
• derivepassphrase-sshagentsocketproviders: Definitions for derivepassphrase’s SSH agent socket providers.

Technical prerequisites

• Prerequisites for using derivepassphrase vault with an SSH key