Mercurial > emacs
diff lisp/epa.el @ 91647:f9692dfe86e7
EasyPG: Initial check-in.
author | Michael Olson <mwolson@gnu.org> |
---|---|
date | Fri, 08 Feb 2008 06:54:27 +0000 |
parents | |
children | d125b90283d2 |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/lisp/epa.el Fri Feb 08 06:54:27 2008 +0000 @@ -0,0 +1,1176 @@ +;;; epa.el --- the EasyPG Assistant +;; Copyright (C) 2006, 2007, 2008 Free Software Foundation, Inc. + +;; Author: Daiki Ueno <ueno@unixuser.org> +;; Keywords: PGP, GnuPG + +;; This file is part of GNU Emacs. + +;; GNU Emacs is free software; you can redistribute it and/or modify +;; it under the terms of the GNU General Public License as published by +;; the Free Software Foundation; either version 3, or (at your option) +;; any later version. + +;; GNU Emacs is distributed in the hope that it will be useful, +;; but WITHOUT ANY WARRANTY; without even the implied warranty of +;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +;; GNU General Public License for more details. + +;; You should have received a copy of the GNU General Public License +;; along with GNU Emacs; see the file COPYING. If not, write to the +;; Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, +;; Boston, MA 02110-1301, USA. + +;;; Code: + +(require 'epg) +(require 'font-lock) +(require 'widget) +(eval-when-compile (require 'wid-edit)) +(require 'derived) + +(defgroup epa nil + "The EasyPG Assistant" + :group 'epg) + +(defcustom epa-popup-info-window t + "If non-nil, status information from epa commands is displayed on +the separate window." + :type 'boolean + :group 'epa) + +(defcustom epa-info-window-height 5 + "Number of lines used to display status information." + :type 'integer + :group 'epa) + +(defgroup epa-faces nil + "Faces for epa-mode." + :group 'epa) + +(defface epa-validity-high + `((((class color) (background dark)) + (:foreground "PaleTurquoise" + ,@(if (assq ':weight custom-face-attributes) + '(:weight bold) + '(:bold t)))) + (t + (,@(if (assq ':weight custom-face-attributes) + '(:weight bold) + '(:bold t))))) + "Face used for displaying the high validity." + :group 'epa-faces) + +(defface epa-validity-medium + `((((class color) (background dark)) + (:foreground "PaleTurquoise" + ,@(if (assq ':slant custom-face-attributes) + '(:slant italic) + '(:italic t)))) + (t + (,@(if (assq ':slant custom-face-attributes) + '(:slant italic) + '(:italic t))))) + "Face used for displaying the medium validity." + :group 'epa-faces) + +(defface epa-validity-low + `((t + (,@(if (assq ':slant custom-face-attributes) + '(:slant italic) + '(:italic t))))) + "Face used for displaying the low validity." + :group 'epa-faces) + +(defface epa-validity-disabled + `((t + (,@(if (assq ':slant custom-face-attributes) + '(:slant italic) + '(:italic t)) + :inverse-video t))) + "Face used for displaying the disabled validity." + :group 'epa-faces) + +(defface epa-string + '((((class color) (background dark)) + (:foreground "lightyellow")) + (((class color) (background light)) + (:foreground "blue4"))) + "Face used for displaying the string." + :group 'epa-faces) + +(defface epa-mark + `((((class color) (background dark)) + (:foreground "orange" + ,@(if (assq ':weight custom-face-attributes) + '(:weight bold) + '(:bold t)))) + (((class color) (background light)) + (:foreground "red" + ,@(if (assq ':weight custom-face-attributes) + '(:weight bold) + '(:bold t)))) + (t + (,@(if (assq ':weight custom-face-attributes) + '(:weight bold) + '(:bold t))))) + "Face used for displaying the high validity." + :group 'epa-faces) + +(defface epa-field-name + `((((class color) (background dark)) + (:foreground "PaleTurquoise" + ,@(if (assq ':weight custom-face-attributes) + '(:weight bold) + '(:bold t)))) + (t + (,@(if (assq ':weight custom-face-attributes) + '(:weight bold) + '(:bold t))))) + "Face for the name of the attribute field." + :group 'epa) + +(defface epa-field-body + `((((class color) (background dark)) + (:foreground "turquoise" + ,@(if (assq ':slant custom-face-attributes) + '(:slant italic) + '(:italic t)))) + (t + (,@(if (assq ':slant custom-face-attributes) + '(:slant italic) + '(:italic t))))) + "Face for the body of the attribute field." + :group 'epa) + +(defcustom epa-validity-face-alist + '((unknown . epa-validity-disabled) + (invalid . epa-validity-disabled) + (disabled . epa-validity-disabled) + (revoked . epa-validity-disabled) + (expired . epa-validity-disabled) + (none . epa-validity-low) + (undefined . epa-validity-low) + (never . epa-validity-low) + (marginal . epa-validity-medium) + (full . epa-validity-high) + (ultimate . epa-validity-high)) + "An alist mapping validity values to faces." + :type '(repeat (cons symbol face)) + :group 'epa) + +(defvar epa-font-lock-keywords + '(("^\\*" + (0 'epa-mark)) + ("^\t\\([^\t:]+:\\)[ \t]*\\(.*\\)$" + (1 'epa-field-name) + (2 'epa-field-body))) + "Default expressions to addon in epa-mode.") + +(defconst epa-pubkey-algorithm-letter-alist + '((1 . ?R) + (2 . ?r) + (3 . ?s) + (16 . ?g) + (17 . ?D) + (20 . ?G))) + +(defvar epa-protocol 'OpenPGP + "*The default protocol. +The value can be either OpenPGP or CMS. + +You should bind this variable with `let', but do not set it globally.") + +(defvar epa-armor nil + "*If non-nil, epa commands create ASCII armored output. + +You should bind this variable with `let', but do not set it globally.") + +(defvar epa-textmode nil + "*If non-nil, epa commands treat input files as text. + +You should bind this variable with `let', but do not set it globally.") + +(defvar epa-keys-buffer nil) +(defvar epa-key-buffer-alist nil) +(defvar epa-key nil) +(defvar epa-list-keys-arguments nil) +(defvar epa-info-buffer nil) +(defvar epa-last-coding-system-specified nil) + +(defvar epa-key-list-mode-map + (let ((keymap (make-sparse-keymap))) + (define-key keymap "m" 'epa-mark-key) + (define-key keymap "u" 'epa-unmark-key) + (define-key keymap "d" 'epa-decrypt-file) + (define-key keymap "v" 'epa-verify-file) + (define-key keymap "s" 'epa-sign-file) + (define-key keymap "e" 'epa-encrypt-file) + (define-key keymap "r" 'epa-delete-keys) + (define-key keymap "i" 'epa-import-keys) + (define-key keymap "o" 'epa-export-keys) + (define-key keymap "g" 'revert-buffer) + (define-key keymap "n" 'next-line) + (define-key keymap "p" 'previous-line) + (define-key keymap " " 'scroll-up) + (define-key keymap [delete] 'scroll-down) + (define-key keymap "q" 'epa-exit-buffer) + keymap)) + +(defvar epa-key-mode-map + (let ((keymap (make-sparse-keymap))) + (define-key keymap "q" 'epa-exit-buffer) + keymap)) + +(defvar epa-info-mode-map + (let ((keymap (make-sparse-keymap))) + (define-key keymap "q" 'delete-window) + keymap)) + +(defvar epa-exit-buffer-function #'bury-buffer) + +(define-widget 'epa-key 'push-button + "Button for representing a epg-key object." + :format "%[%v%]" + :button-face-get 'epa--key-widget-button-face-get + :value-create 'epa--key-widget-value-create + :action 'epa--key-widget-action + :help-echo 'epa--key-widget-help-echo) + +(defun epa--key-widget-action (widget &optional event) + (epa--show-key (widget-get widget :value))) + +(defun epa--key-widget-value-create (widget) + (let* ((key (widget-get widget :value)) + (primary-sub-key (car (epg-key-sub-key-list key))) + (primary-user-id (car (epg-key-user-id-list key)))) + (insert (format "%c " + (if (epg-sub-key-validity primary-sub-key) + (car (rassq (epg-sub-key-validity primary-sub-key) + epg-key-validity-alist)) + ? )) + (epg-sub-key-id primary-sub-key) + " " + (if primary-user-id + (if (stringp (epg-user-id-string primary-user-id)) + (epg-user-id-string primary-user-id) + (epg-decode-dn (epg-user-id-string primary-user-id))) + "")))) + +(defun epa--key-widget-button-face-get (widget) + (let ((validity (epg-sub-key-validity (car (epg-key-sub-key-list + (widget-get widget :value)))))) + (if validity + (cdr (assq validity epa-validity-face-alist)) + 'default))) + +(defun epa--key-widget-help-echo (widget) + (format "Show %s" + (epg-sub-key-id (car (epg-key-sub-key-list + (widget-get widget :value)))))) + +(eval-and-compile + (if (fboundp 'encode-coding-string) + (defalias 'epa--encode-coding-string 'encode-coding-string) + (defalias 'epa--encode-coding-string 'identity))) + +(eval-and-compile + (if (fboundp 'decode-coding-string) + (defalias 'epa--decode-coding-string 'decode-coding-string) + (defalias 'epa--decode-coding-string 'identity))) + +(defun epa-key-list-mode () + "Major mode for `epa-list-keys'." + (kill-all-local-variables) + (buffer-disable-undo) + (setq major-mode 'epa-key-list-mode + mode-name "Keys" + truncate-lines t + buffer-read-only t) + (use-local-map epa-key-list-mode-map) + (make-local-variable 'font-lock-defaults) + (setq font-lock-defaults '(epa-font-lock-keywords t)) + ;; In XEmacs, auto-initialization of font-lock is not effective + ;; if buffer-file-name is not set. + (font-lock-set-defaults) + (make-local-variable 'epa-exit-buffer-function) + (make-local-variable 'revert-buffer-function) + (setq revert-buffer-function 'epa--key-list-revert-buffer) + (run-hooks 'epa-key-list-mode-hook)) + +(defun epa-key-mode () + "Major mode for a key description." + (kill-all-local-variables) + (buffer-disable-undo) + (setq major-mode 'epa-key-mode + mode-name "Key" + truncate-lines t + buffer-read-only t) + (use-local-map epa-key-mode-map) + (make-local-variable 'font-lock-defaults) + (setq font-lock-defaults '(epa-font-lock-keywords t)) + ;; In XEmacs, auto-initialization of font-lock is not effective + ;; if buffer-file-name is not set. + (font-lock-set-defaults) + (make-local-variable 'epa-exit-buffer-function) + (run-hooks 'epa-key-mode-hook)) + +(defun epa-info-mode () + "Major mode for `epa-info-buffer'." + (kill-all-local-variables) + (buffer-disable-undo) + (setq major-mode 'epa-info-mode + mode-name "Info" + truncate-lines t + buffer-read-only t) + (use-local-map epa-info-mode-map) + (run-hooks 'epa-info-mode-hook)) + +(defun epa-mark-key (&optional arg) + "Mark a key on the current line. +If ARG is non-nil, unmark the key." + (interactive "P") + (let ((inhibit-read-only t) + buffer-read-only + properties) + (beginning-of-line) + (unless (get-text-property (point) 'epa-key) + (error "No key on this line")) + (setq properties (text-properties-at (point))) + (delete-char 1) + (insert (if arg " " "*")) + (set-text-properties (1- (point)) (point) properties) + (forward-line))) + +(defun epa-unmark-key (&optional arg) + "Unmark a key on the current line. +If ARG is non-nil, mark the key." + (interactive "P") + (epa-mark-key (not arg))) + +(defun epa-exit-buffer () + "Exit the current buffer. +`epa-exit-buffer-function' is called if it is set." + (interactive) + (funcall epa-exit-buffer-function)) + +(defun epa--insert-keys (keys) + (save-excursion + (save-restriction + (narrow-to-region (point) (point)) + (let (point) + (while keys + (setq point (point)) + (insert " ") + (add-text-properties point (point) + (list 'epa-key (car keys) + 'front-sticky nil + 'rear-nonsticky t + 'start-open t + 'end-open t)) + (widget-create 'epa-key :value (car keys)) + (insert "\n") + (setq keys (cdr keys)))) + (add-text-properties (point-min) (point-max) + (list 'epa-list-keys t + 'front-sticky nil + 'rear-nonsticky t + 'start-open t + 'end-open t))))) + +(defun epa--list-keys (name secret) + (unless (and epa-keys-buffer + (buffer-live-p epa-keys-buffer)) + (setq epa-keys-buffer (generate-new-buffer "*Keys*"))) + (set-buffer epa-keys-buffer) + (epa-key-list-mode) + (let ((inhibit-read-only t) + buffer-read-only + (point (point-min)) + (context (epg-make-context epa-protocol))) + (unless (get-text-property point 'epa-list-keys) + (setq point (next-single-property-change point 'epa-list-keys))) + (when point + (delete-region point + (or (next-single-property-change point 'epa-list-keys) + (point-max))) + (goto-char point)) + (epa--insert-keys (epg-list-keys context name secret)) + (widget-setup) + (set-keymap-parent (current-local-map) widget-keymap)) + (make-local-variable 'epa-list-keys-arguments) + (setq epa-list-keys-arguments (list name secret)) + (goto-char (point-min)) + (pop-to-buffer (current-buffer))) + +;;;###autoload +(defun epa-list-keys (&optional name) + "List all keys matched with NAME from the public keyring." + (interactive + (if current-prefix-arg + (let ((name (read-string "Pattern: " + (if epa-list-keys-arguments + (car epa-list-keys-arguments))))) + (list (if (equal name "") nil name))) + (list nil))) + (epa--list-keys name nil)) + +;;;###autoload +(defun epa-list-secret-keys (&optional name) + "List all keys matched with NAME from the private keyring." + (interactive + (if current-prefix-arg + (let ((name (read-string "Pattern: " + (if epa-list-keys-arguments + (car epa-list-keys-arguments))))) + (list (if (equal name "") nil name))) + (list nil))) + (epa--list-keys name t)) + +(defun epa--key-list-revert-buffer (&optional ignore-auto noconfirm) + (apply #'epa--list-keys epa-list-keys-arguments)) + +(defun epa--marked-keys () + (or (save-excursion + (set-buffer epa-keys-buffer) + (goto-char (point-min)) + (let (keys key) + (while (re-search-forward "^\\*" nil t) + (if (setq key (get-text-property (match-beginning 0) + 'epa-key)) + (setq keys (cons key keys)))) + (nreverse keys))) + (save-excursion + (beginning-of-line) + (let ((key (get-text-property (point) 'epa-key))) + (if key + (list key)))))) + +(defun epa--select-keys (prompt keys) + (save-excursion + (unless (and epa-keys-buffer + (buffer-live-p epa-keys-buffer)) + (setq epa-keys-buffer (generate-new-buffer "*Keys*"))) + (set-buffer epa-keys-buffer) + (epa-key-list-mode) + (let ((inhibit-read-only t) + buffer-read-only) + (erase-buffer) + (insert prompt "\n" + (substitute-command-keys "\ +- `\\[epa-mark-key]' to mark a key on the line +- `\\[epa-unmark-key]' to unmark a key on the line\n")) + (widget-create 'link + :notify (lambda (&rest ignore) (abort-recursive-edit)) + :help-echo + (substitute-command-keys + "Click here or \\[abort-recursive-edit] to cancel") + "Cancel") + (widget-create 'link + :notify (lambda (&rest ignore) (exit-recursive-edit)) + :help-echo + (substitute-command-keys + "Click here or \\[exit-recursive-edit] to finish") + "OK") + (insert "\n\n") + (epa--insert-keys keys) + (widget-setup) + (set-keymap-parent (current-local-map) widget-keymap) + (setq epa-exit-buffer-function #'abort-recursive-edit) + (goto-char (point-min)) + (pop-to-buffer (current-buffer))) + (unwind-protect + (progn + (recursive-edit) + (epa--marked-keys)) + (if (get-buffer-window epa-keys-buffer) + (delete-window (get-buffer-window epa-keys-buffer))) + (kill-buffer epa-keys-buffer)))) + +;;;###autoload +(defun epa-select-keys (context prompt &optional names secret) + "Display a user's keyring and ask him to select keys. +CONTEXT is an epg-context. +PROMPT is a string to prompt with. +NAMES is a list of strings to be matched with keys. If it is nil, all +the keys are listed. +If SECRET is non-nil, list secret keys instead of public keys." + (let ((keys (epg-list-keys context names secret))) + (if (> (length keys) 1) + (epa--select-keys prompt keys) + keys))) + +(defun epa--show-key (key) + (let* ((primary-sub-key (car (epg-key-sub-key-list key))) + (entry (assoc (epg-sub-key-id primary-sub-key) + epa-key-buffer-alist)) + (inhibit-read-only t) + buffer-read-only + pointer) + (unless entry + (setq entry (cons (epg-sub-key-id primary-sub-key) nil) + epa-key-buffer-alist (cons entry epa-key-buffer-alist))) + (unless (and (cdr entry) + (buffer-live-p (cdr entry))) + (setcdr entry (generate-new-buffer + (format "*Key*%s" (epg-sub-key-id primary-sub-key))))) + (set-buffer (cdr entry)) + (epa-key-mode) + (make-local-variable 'epa-key) + (setq epa-key key) + (erase-buffer) + (setq pointer (epg-key-user-id-list key)) + (while pointer + (if (car pointer) + (insert " " + (if (epg-user-id-validity (car pointer)) + (char-to-string + (car (rassq (epg-user-id-validity (car pointer)) + epg-key-validity-alist))) + " ") + " " + (if (stringp (epg-user-id-string (car pointer))) + (epg-user-id-string (car pointer)) + (epg-decode-dn (epg-user-id-string (car pointer)))) + "\n")) + (setq pointer (cdr pointer))) + (setq pointer (epg-key-sub-key-list key)) + (while pointer + (insert " " + (if (epg-sub-key-validity (car pointer)) + (char-to-string + (car (rassq (epg-sub-key-validity (car pointer)) + epg-key-validity-alist))) + " ") + " " + (epg-sub-key-id (car pointer)) + " " + (format "%dbits" + (epg-sub-key-length (car pointer))) + " " + (cdr (assq (epg-sub-key-algorithm (car pointer)) + epg-pubkey-algorithm-alist)) + "\n\tCreated: " + (condition-case nil + (format-time-string "%Y-%m-%d" + (epg-sub-key-creation-time (car pointer))) + (error "????-??-??")) + (if (epg-sub-key-expiration-time (car pointer)) + (format "\n\tExpires: %s" + (condition-case nil + (format-time-string "%Y-%m-%d" + (epg-sub-key-expiration-time + (car pointer))) + (error "????-??-??"))) + "") + "\n\tCapabilities: " + (mapconcat #'symbol-name + (epg-sub-key-capability (car pointer)) + " ") + "\n\tFingerprint: " + (epg-sub-key-fingerprint (car pointer)) + "\n") + (setq pointer (cdr pointer))) + (goto-char (point-min)) + (pop-to-buffer (current-buffer)))) + +(defun epa-display-info (info) + (if epa-popup-info-window + (save-selected-window + (unless (and epa-info-buffer (buffer-live-p epa-info-buffer)) + (setq epa-info-buffer (generate-new-buffer "*Info*"))) + (if (get-buffer-window epa-info-buffer) + (delete-window (get-buffer-window epa-info-buffer))) + (save-excursion + (set-buffer epa-info-buffer) + (let ((inhibit-read-only t) + buffer-read-only) + (erase-buffer) + (insert info)) + (epa-info-mode) + (goto-char (point-min))) + (if (> (window-height) + epa-info-window-height) + (set-window-buffer (split-window nil (- (window-height) + epa-info-window-height)) + epa-info-buffer) + (pop-to-buffer epa-info-buffer) + (if (> (window-height) epa-info-window-height) + (shrink-window (- (window-height) epa-info-window-height))))) + (message "%s" info))) + +(defun epa-display-verify-result (verify-result) + (epa-display-info (epg-verify-result-to-string verify-result))) +(make-obsolete 'epa-display-verify-result 'epa-display-info) + +(defun epa-passphrase-callback-function (context key-id handback) + (if (eq key-id 'SYM) + (read-passwd "Passphrase for symmetric encryption: " + (eq (epg-context-operation context) 'encrypt)) + (read-passwd + (if (eq key-id 'PIN) + "Passphrase for PIN: " + (let ((entry (assoc key-id epg-user-id-alist))) + (if entry + (format "Passphrase for %s %s: " key-id (cdr entry)) + (format "Passphrase for %s: " key-id))))))) + +(defun epa-progress-callback-function (context what char current total + handback) + (message "%s%d%% (%d/%d)" (or handback + (concat what ": ")) + (if (> total 0) (floor (* (/ current (float total)) 100)) 0) + current total)) + +;;;###autoload +(defun epa-decrypt-file (file) + "Decrypt FILE." + (interactive "fFile: ") + (setq file (expand-file-name file)) + (let* ((default-name (file-name-sans-extension file)) + (plain (expand-file-name + (read-file-name + (concat "To file (default " + (file-name-nondirectory default-name) + ") ") + (file-name-directory default-name) + default-name))) + (context (epg-make-context epa-protocol))) + (epg-context-set-passphrase-callback context + #'epa-passphrase-callback-function) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + (format "Decrypting %s..." + (file-name-nondirectory file)))) + (message "Decrypting %s..." (file-name-nondirectory file)) + (epg-decrypt-file context file plain) + (message "Decrypting %s...wrote %s" (file-name-nondirectory file) + (file-name-nondirectory plain)) + (if (epg-context-result-for context 'verify) + (epa-display-info (epg-verify-result-to-string + (epg-context-result-for context 'verify)))))) + +;;;###autoload +(defun epa-verify-file (file) + "Verify FILE." + (interactive "fFile: ") + (setq file (expand-file-name file)) + (let* ((context (epg-make-context epa-protocol)) + (plain (if (equal (file-name-extension file) "sig") + (file-name-sans-extension file)))) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + (format "Verifying %s..." + (file-name-nondirectory file)))) + (message "Verifying %s..." (file-name-nondirectory file)) + (epg-verify-file context file plain) + (message "Verifying %s...done" (file-name-nondirectory file)) + (if (epg-context-result-for context 'verify) + (epa-display-info (epg-verify-result-to-string + (epg-context-result-for context 'verify)))))) + +(defun epa--read-signature-type () + (let (type c) + (while (null type) + (message "Signature type (n,c,d,?) ") + (setq c (read-char)) + (cond ((eq c ?c) + (setq type 'clear)) + ((eq c ?d) + (setq type 'detached)) + ((eq c ??) + (with-output-to-temp-buffer "*Help*" + (save-excursion + (set-buffer standard-output) + (insert "\ +n - Create a normal signature +c - Create a cleartext signature +d - Create a detached signature +? - Show this help +")))) + (t + (setq type 'normal)))))) + +;;;###autoload +(defun epa-sign-file (file signers mode) + "Sign FILE by SIGNERS keys selected." + (interactive + (let ((verbose current-prefix-arg)) + (list (expand-file-name (read-file-name "File: ")) + (if verbose + (epa-select-keys (epg-make-context epa-protocol) + "Select keys for signing. +If no one is selected, default secret key is used. " + nil t)) + (if verbose + (epa--read-signature-type) + 'clear)))) + (let ((signature (concat file + (if (eq epa-protocol 'OpenPGP) + (if (or epa-armor + (not (memq mode + '(nil t normal detached)))) + ".asc" + (if (memq mode '(t detached)) + ".sig" + ".gpg")) + (if (memq mode '(t detached)) + ".p7s" + ".p7m")))) + (context (epg-make-context epa-protocol))) + (epg-context-set-armor context epa-armor) + (epg-context-set-textmode context epa-textmode) + (epg-context-set-signers context signers) + (epg-context-set-passphrase-callback context + #'epa-passphrase-callback-function) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + (format "Signing %s..." + (file-name-nondirectory file)))) + (message "Signing %s..." (file-name-nondirectory file)) + (epg-sign-file context file signature mode) + (message "Signing %s...wrote %s" (file-name-nondirectory file) + (file-name-nondirectory signature)))) + +;;;###autoload +(defun epa-encrypt-file (file recipients) + "Encrypt FILE for RECIPIENTS." + (interactive + (list (expand-file-name (read-file-name "File: ")) + (epa-select-keys (epg-make-context epa-protocol) + "Select recipients for encryption. +If no one is selected, symmetric encryption will be performed. "))) + (let ((cipher (concat file (if (eq epa-protocol 'OpenPGP) + (if epa-armor ".asc" ".gpg") + ".p7m"))) + (context (epg-make-context epa-protocol))) + (epg-context-set-armor context epa-armor) + (epg-context-set-textmode context epa-textmode) + (epg-context-set-passphrase-callback context + #'epa-passphrase-callback-function) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + (format "Encrypting %s..." + (file-name-nondirectory file)))) + (message "Encrypting %s..." (file-name-nondirectory file)) + (epg-encrypt-file context file recipients cipher) + (message "Encrypting %s...wrote %s" (file-name-nondirectory file) + (file-name-nondirectory cipher)))) + +;;;###autoload +(defun epa-decrypt-region (start end) + "Decrypt the current region between START and END. + +Don't use this command in Lisp programs!" + (interactive "r") + (save-excursion + (let ((context (epg-make-context epa-protocol)) + plain) + (epg-context-set-passphrase-callback context + #'epa-passphrase-callback-function) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + "Decrypting...")) + (message "Decrypting...") + (setq plain (epg-decrypt-string context (buffer-substring start end))) + (message "Decrypting...done") + (setq plain (epa--decode-coding-string + plain + (or coding-system-for-read + (get-text-property start 'epa-coding-system-used)))) + (if (y-or-n-p "Replace the original text? ") + (let ((inhibit-read-only t) + buffer-read-only) + (delete-region start end) + (goto-char start) + (insert plain)) + (with-output-to-temp-buffer "*Temp*" + (set-buffer standard-output) + (insert plain) + (epa-info-mode))) + (if (epg-context-result-for context 'verify) + (epa-display-info (epg-verify-result-to-string + (epg-context-result-for context 'verify))))))) + +(defun epa--find-coding-system-for-mime-charset (mime-charset) + (if (featurep 'xemacs) + (if (fboundp 'find-coding-system) + (find-coding-system mime-charset)) + (let ((pointer (coding-system-list))) + (while (and pointer + (eq (coding-system-get (car pointer) 'mime-charset) + mime-charset)) + (setq pointer (cdr pointer))) + pointer))) + +;;;###autoload +(defun epa-decrypt-armor-in-region (start end) + "Decrypt OpenPGP armors in the current region between START and END. + +Don't use this command in Lisp programs!" + (interactive "r") + (save-excursion + (save-restriction + (narrow-to-region start end) + (goto-char start) + (let (armor-start armor-end) + (while (re-search-forward "-----BEGIN PGP MESSAGE-----$" nil t) + (setq armor-start (match-beginning 0) + armor-end (re-search-forward "^-----END PGP MESSAGE-----$" + nil t)) + (unless armor-end + (error "No armor tail")) + (goto-char armor-start) + (let ((coding-system-for-read + (or coding-system-for-read + (if (re-search-forward "^Charset: \\(.*\\)" armor-end t) + (epa--find-coding-system-for-mime-charset + (intern (downcase (match-string 1)))))))) + (goto-char armor-end) + (epa-decrypt-region armor-start armor-end))))))) + +;;;###autoload +(defun epa-verify-region (start end) + "Verify the current region between START and END. + +Don't use this command in Lisp programs!" + (interactive "r") + (let ((context (epg-make-context epa-protocol)) + plain) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + "Verifying...")) + (message "Verifying...") + (setq plain (epg-verify-string + context + (epa--encode-coding-string + (buffer-substring start end) + (or coding-system-for-write + (get-text-property start 'epa-coding-system-used))))) + (message "Verifying...done") + (setq plain (epa--decode-coding-string + plain + (or coding-system-for-read + (get-text-property start 'epa-coding-system-used)))) + (if (y-or-n-p "Replace the original text? ") + (let ((inhibit-read-only t) + buffer-read-only) + (delete-region start end) + (goto-char start) + (insert plain)) + (with-output-to-temp-buffer "*Temp*" + (set-buffer standard-output) + (insert plain) + (epa-info-mode))) + (if (epg-context-result-for context 'verify) + (epa-display-info (epg-verify-result-to-string + (epg-context-result-for context 'verify)))))) + +;;;###autoload +(defun epa-verify-cleartext-in-region (start end) + "Verify OpenPGP cleartext signed messages in the current region +between START and END. + +Don't use this command in Lisp programs!" + (interactive "r") + (save-excursion + (save-restriction + (narrow-to-region start end) + (goto-char start) + (let (cleartext-start cleartext-end) + (while (re-search-forward "-----BEGIN PGP SIGNED MESSAGE-----$" + nil t) + (setq cleartext-start (match-beginning 0)) + (unless (re-search-forward "^-----BEGIN PGP SIGNATURE-----$" + nil t) + (error "Invalid cleartext signed message")) + (setq cleartext-end (re-search-forward + "^-----END PGP SIGNATURE-----$" + nil t)) + (unless cleartext-end + (error "No cleartext tail")) + (epa-verify-region cleartext-start cleartext-end)))))) + +(eval-and-compile + (if (fboundp 'select-safe-coding-system) + (defalias 'epa--select-safe-coding-system 'select-safe-coding-system) + (defun epa--select-safe-coding-system (from to) + buffer-file-coding-system))) + +;;;###autoload +(defun epa-sign-region (start end signers mode) + "Sign the current region between START and END by SIGNERS keys selected. + +Don't use this command in Lisp programs!" + (interactive + (let ((verbose current-prefix-arg)) + (setq epa-last-coding-system-specified + (or coding-system-for-write + (epa--select-safe-coding-system + (region-beginning) (region-end)))) + (list (region-beginning) (region-end) + (if verbose + (epa-select-keys (epg-make-context epa-protocol) + "Select keys for signing. +If no one is selected, default secret key is used. " + nil t)) + (if verbose + (epa--read-signature-type) + 'clear)))) + (save-excursion + (let ((context (epg-make-context epa-protocol)) + signature) + ;;(epg-context-set-armor context epa-armor) + (epg-context-set-armor context t) + ;;(epg-context-set-textmode context epa-textmode) + (epg-context-set-textmode context t) + (epg-context-set-signers context signers) + (epg-context-set-passphrase-callback context + #'epa-passphrase-callback-function) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + "Signing...")) + (message "Signing...") + (setq signature (epg-sign-string context + (epa--encode-coding-string + (buffer-substring start end) + epa-last-coding-system-specified) + mode)) + (message "Signing...done") + (delete-region start end) + (goto-char start) + (add-text-properties (point) + (progn + (insert (epa--decode-coding-string + signature + (or coding-system-for-read + epa-last-coding-system-specified))) + (point)) + (list 'epa-coding-system-used + epa-last-coding-system-specified + 'front-sticky nil + 'rear-nonsticky t + 'start-open t + 'end-open t))))) + +(eval-and-compile + (if (fboundp 'derived-mode-p) + (defalias 'epa--derived-mode-p 'derived-mode-p) + (defun epa--derived-mode-p (&rest modes) + "Non-nil if the current major mode is derived from one of MODES. +Uses the `derived-mode-parent' property of the symbol to trace backwards." + (let ((parent major-mode)) + (while (and (not (memq parent modes)) + (setq parent (get parent 'derived-mode-parent)))) + parent)))) + +;;;###autoload +(defun epa-encrypt-region (start end recipients sign signers) + "Encrypt the current region between START and END for RECIPIENTS. + +Don't use this command in Lisp programs!" + (interactive + (let ((verbose current-prefix-arg) + (context (epg-make-context epa-protocol)) + sign) + (setq epa-last-coding-system-specified + (or coding-system-for-write + (epa--select-safe-coding-system + (region-beginning) (region-end)))) + (list (region-beginning) (region-end) + (epa-select-keys context + "Select recipients for encryption. +If no one is selected, symmetric encryption will be performed. ") + (setq sign (if verbose (y-or-n-p "Sign? "))) + (if sign + (epa-select-keys context + "Select keys for signing. "))))) + (save-excursion + (let ((context (epg-make-context epa-protocol)) + cipher) + ;;(epg-context-set-armor context epa-armor) + (epg-context-set-armor context t) + ;;(epg-context-set-textmode context epa-textmode) + (epg-context-set-textmode context t) + (if sign + (epg-context-set-signers context signers)) + (epg-context-set-passphrase-callback context + #'epa-passphrase-callback-function) + (epg-context-set-progress-callback context + (cons + #'epa-progress-callback-function + "Encrypting...")) + (message "Encrypting...") + (setq cipher (epg-encrypt-string context + (epa--encode-coding-string + (buffer-substring start end) + epa-last-coding-system-specified) + recipients + sign)) + (message "Encrypting...done") + (delete-region start end) + (goto-char start) + (add-text-properties (point) + (progn + (insert cipher) + (point)) + (list 'epa-coding-system-used + epa-last-coding-system-specified + 'front-sticky nil + 'rear-nonsticky t + 'start-open t + 'end-open t))))) + +;;;###autoload +(defun epa-delete-keys (keys &optional allow-secret) + "Delete selected KEYS. + +Don't use this command in Lisp programs!" + (interactive + (let ((keys (epa--marked-keys))) + (unless keys + (error "No keys selected")) + (list keys + (eq (nth 1 epa-list-keys-arguments) t)))) + (let ((context (epg-make-context epa-protocol))) + (message "Deleting...") + (epg-delete-keys context keys allow-secret) + (message "Deleting...done") + (apply #'epa-list-keys epa-list-keys-arguments))) + +;;;###autoload +(defun epa-import-keys (file) + "Import keys from FILE. + +Don't use this command in Lisp programs!" + (interactive "fFile: ") + (setq file (expand-file-name file)) + (let ((context (epg-make-context epa-protocol))) + (message "Importing %s..." (file-name-nondirectory file)) + (condition-case nil + (progn + (epg-import-keys-from-file context file) + (message "Importing %s...done" (file-name-nondirectory file))) + (error + (message "Importing %s...failed" (file-name-nondirectory file)))) + (if (epg-context-result-for context 'import) + (epa-display-info (epg-import-result-to-string + (epg-context-result-for context 'import)))) + (if (eq major-mode 'epa-key-list-mode) + (apply #'epa-list-keys epa-list-keys-arguments)))) + +;;;###autoload +(defun epa-import-keys-region (start end) + "Import keys from the region. + +Don't use this command in Lisp programs!" + (interactive "r") + (let ((context (epg-make-context epa-protocol))) + (message "Importing...") + (condition-case nil + (progn + (epg-import-keys-from-string context (buffer-substring start end)) + (message "Importing...done")) + (error + (message "Importing...failed"))) + (if (epg-context-result-for context 'import) + (epa-display-info (epg-import-result-to-string + (epg-context-result-for context 'import)))))) + +;;;###autoload +(defun epa-import-armor-in-region (start end) + "Import keys in the OpenPGP armor format in the current region +between START and END. + +Don't use this command in Lisp programs!" + (interactive "r") + (save-excursion + (save-restriction + (narrow-to-region start end) + (goto-char start) + (let (armor-start armor-end) + (while (re-search-forward + "-----BEGIN \\(PGP \\(PUBLIC\\|PRIVATE\\) KEY BLOCK\\)-----$" + nil t) + (setq armor-start (match-beginning 0) + armor-end (re-search-forward + (concat "^-----END " (match-string 1) "-----$") + nil t)) + (unless armor-end + (error "No armor tail")) + (epa-import-keys-region armor-start armor-end)))))) + +;;;###autoload +(defun epa-export-keys (keys file) + "Export selected KEYS to FILE. + +Don't use this command in Lisp programs!" + (interactive + (let ((keys (epa--marked-keys)) + default-name) + (unless keys + (error "No keys selected")) + (setq default-name + (expand-file-name + (concat (epg-sub-key-id (car (epg-key-sub-key-list (car keys)))) + (if epa-armor ".asc" ".gpg")) + default-directory)) + (list keys + (expand-file-name + (read-file-name + (concat "To file (default " + (file-name-nondirectory default-name) + ") ") + (file-name-directory default-name) + default-name))))) + (let ((context (epg-make-context epa-protocol))) + (epg-context-set-armor context epa-armor) + (message "Exporting to %s..." (file-name-nondirectory file)) + (epg-export-keys-to-file context keys file) + (message "Exporting to %s...done" (file-name-nondirectory file)))) + +;;;###autoload +(defun epa-insert-keys (keys) + "Insert selected KEYS after the point. + +Don't use this command in Lisp programs!" + (interactive + (list (epa-select-keys (epg-make-context epa-protocol) + "Select keys to export. "))) + (let ((context (epg-make-context epa-protocol))) + ;;(epg-context-set-armor context epa-armor) + (epg-context-set-armor context t) + (insert (epg-export-keys-to-string context keys)))) + +;; (defun epa-sign-keys (keys &optional local) +;; "Sign selected KEYS. +;; If a prefix-arg is specified, the signature is marked as non exportable. + +;; Don't use this command in Lisp programs!" +;; (interactive +;; (let ((keys (epa--marked-keys))) +;; (unless keys +;; (error "No keys selected")) +;; (list keys current-prefix-arg))) +;; (let ((context (epg-make-context epa-protocol))) +;; (epg-context-set-passphrase-callback context +;; #'epa-passphrase-callback-function) +;; (epg-context-set-progress-callback context +;; (cons +;; #'epa-progress-callback-function +;; "Signing keys...")) +;; (message "Signing keys...") +;; (epg-sign-keys context keys local) +;; (message "Signing keys...done"))) +;; (make-obsolete 'epa-sign-keys "Do not use.") + +(provide 'epa) + +;;; epa.el ends here