1 ;;; epa-file.el --- the EasyPG Assistant, transparent file encryption
2 ;; Copyright (C) 2006 Daiki Ueno
4 ;; Author: Daiki Ueno <ueno@unixuser.org>
5 ;; Keywords: PGP, GnuPG
7 ;; This file is part of EasyPG.
9 ;; This program is free software; you can redistribute it and/or modify
10 ;; it under the terms of the GNU General Public License as published by
11 ;; the Free Software Foundation; either version 2, or (at your option)
14 ;; This program is distributed in the hope that it will be useful,
15 ;; but WITHOUT ANY WARRANTY; without even the implied warranty of
16 ;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 ;; GNU General Public License for more details.
19 ;; You should have received a copy of the GNU General Public License
20 ;; along with GNU Emacs; see the file COPYING. If not, write to the
21 ;; Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
22 ;; Boston, MA 02110-1301, USA.
28 (defgroup epa-file nil
29 "The EasyPG Assistant hooks for transparent file encryption"
32 (defun epa-file--file-name-regexp-set (variable value)
33 (set-default variable value)
34 (if (fboundp 'epa-file-name-regexp-update)
35 (epa-file-name-regexp-update)))
37 (defcustom epa-file-name-regexp "\\.gpg\\(~\\|\\.~[0-9]+~\\)?\\'"
38 "Regexp which matches filenames to be encrypted with GnuPG.
40 If you set this outside Custom while epa-file is already enabled, you
41 have to call `epa-file-name-regexp-update' after setting it to
42 properly update file-name-handler-alist. Setting this through Custom
43 does that automatically."
46 :set 'epa-file--file-name-regexp-set)
48 (defcustom epa-file-cache-passphrase-for-symmetric-encryption nil
49 "If non-nil, cache passphrase for symmetric encryption."
53 (defcustom epa-file-inhibit-auto-save t
54 "If non-nil, disable auto-saving when opening an encrypted file."
58 (defcustom epa-file-select-keys nil
59 "If non-nil, always asks user to select recipients."
63 (defvar epa-file-encrypt-to nil
64 "*Recipient(s) used for encrypting files.
65 May either be a string or a list of strings.")
68 (put 'epa-file-encrypt-to 'safe-local-variable
80 (put 'epa-file-encrypt-to 'permanent-local t)
82 (defvar epa-file-handler
83 (cons epa-file-name-regexp 'epa-file-handler))
85 (defvar epa-file-auto-mode-alist-entry
86 (list epa-file-name-regexp nil 'epa-file))
88 (defvar epa-file-passphrase-alist nil)
91 (if (fboundp 'encode-coding-string)
92 (defalias 'epa-file--encode-coding-string 'encode-coding-string)
93 (defalias 'epa-file--encode-coding-string 'identity)))
96 (if (fboundp 'decode-coding-string)
97 (defalias 'epa-file--decode-coding-string 'decode-coding-string)
98 (defalias 'epa-file--decode-coding-string 'identity)))
100 (defun epa-file-name-regexp-update ()
102 (unless (equal (car epa-file-handler) epa-file-name-regexp)
103 (setcar epa-file-handler epa-file-name-regexp)))
105 (defun epa-file-passphrase-callback-function (context key-id file)
106 (if (and epa-file-cache-passphrase-for-symmetric-encryption
109 (setq file (file-truename file))
110 (let ((entry (assoc file epa-file-passphrase-alist))
112 (or (copy-sequence (cdr entry))
115 (setq entry (list file)
116 epa-file-passphrase-alist
118 epa-file-passphrase-alist)))
119 (setq passphrase (epa-passphrase-callback-function context
121 (setcdr entry (copy-sequence passphrase))
123 (epa-passphrase-callback-function context key-id nil)))
125 (defun epa-file-handler (operation &rest args)
127 (let ((op (get operation 'epa-file)))
130 (epa-file-run-real-handler operation args)))))
132 (defun epa-file-run-real-handler (operation args)
133 (let ((inhibit-file-name-handlers
134 (cons 'epa-file-handler
135 (and (eq inhibit-file-name-operation operation)
136 inhibit-file-name-handlers)))
137 (inhibit-file-name-operation operation))
138 (apply operation args)))
140 (defun epa-file-decode-and-insert (string file visit beg end replace)
141 (if (fboundp 'decode-coding-inserted-region)
143 (narrow-to-region (point) (point))
144 (let ((multibyte enable-multibyte-characters))
145 (set-buffer-multibyte nil)
147 (set-buffer-multibyte multibyte)
148 (decode-coding-inserted-region
149 (point-min) (point-max)
150 (substring file 0 (string-match epa-file-name-regexp file))
151 visit beg end replace)))
152 (insert (epa-file--decode-coding-string string (or coding-system-for-read
155 (defvar last-coding-system-used)
156 (defun epa-file-insert-file-contents (file &optional visit beg end replace)
157 (barf-if-buffer-read-only)
158 (if (and visit (or beg end))
159 (error "Attempt to visit less than an entire file"))
160 (setq file (expand-file-name file))
163 (epa-file-run-real-handler #'file-local-copy (list file))
165 (local-file (or local-copy file))
166 (context (epg-make-context))
169 (setq buffer-file-name file))
170 (epg-context-set-passphrase-callback
172 (cons #'epa-file-passphrase-callback-function
174 (epg-context-set-progress-callback context
175 #'epa-progress-callback-function)
179 (goto-char (point-min)))
180 (condition-case error
181 (setq string (epg-decrypt-file context local-file nil))
183 (if (setq entry (assoc file epa-file-passphrase-alist))
186 (cons "Opening input file" (cdr error)))))
187 (make-local-variable 'epa-file-encrypt-to)
188 (setq epa-file-encrypt-to
189 (mapcar #'car (epg-context-result-for context 'encrypted-to)))
191 (setq string (substring string (or beg 0) end)))
194 (narrow-to-region (point) (point))
195 (epa-file-decode-and-insert string file visit beg end replace)
196 (setq length (- (point-max) (point-min))))
198 (delete-region (point) (point-max)))))
200 (file-exists-p local-copy))
201 (delete-file local-copy)))
203 (put 'insert-file-contents 'epa-file 'epa-file-insert-file-contents)
205 (defun epa-file-write-region (start end file &optional append visit lockname
208 (error "Can't append to the file."))
209 (setq file (expand-file-name file))
210 (let* ((coding-system (or coding-system-for-write
211 (if (fboundp 'select-safe-coding-system)
212 ;; This is needed since Emacs 22 has
213 ;; no-conversion setting for *.gpg in
214 ;; `auto-coding-alist'.
215 (let ((buffer-file-name
216 (file-name-sans-extension file)))
217 (select-safe-coding-system
218 (point-min) (point-max)))
219 buffer-file-coding-system)))
220 (context (epg-make-context))
221 (coding-system-for-write 'binary)
225 ((listp epa-file-encrypt-to) epa-file-encrypt-to)
226 ((stringp epa-file-encrypt-to) (list epa-file-encrypt-to)))))
227 (epg-context-set-passphrase-callback
229 (cons #'epa-file-passphrase-callback-function
231 (epg-context-set-progress-callback context
232 #'epa-progress-callback-function)
233 (epg-context-set-armor context epa-armor)
234 (condition-case error
239 (epa-file--encode-coding-string start coding-system)
240 (epa-file--encode-coding-string (buffer-substring start end)
242 (if (or epa-file-select-keys
243 (not (local-variable-p 'epa-file-encrypt-to
247 "Select recipents for encryption.
248 If no one is selected, symmetric encryption will be performed. "
250 (if epa-file-encrypt-to
251 (epg-list-keys context recipients)))))
253 (if (setq entry (assoc file epa-file-passphrase-alist))
255 (signal 'file-error (cons "Opening output file" (cdr error)))))
256 (epa-file-run-real-handler
258 (list string nil file append visit lockname mustbenew))
259 (if (boundp 'last-coding-system-used)
260 (setq last-coding-system-used coding-system))
263 (setq buffer-file-name file)
264 (set-visited-file-modtime))
267 (set-visited-file-modtime)
268 (setq buffer-file-name visit))))
272 (message "Wrote %s" buffer-file-name))))
273 (put 'write-region 'epa-file 'epa-file-write-region)
275 (defun epa-file-find-file-hook ()
276 (if (and buffer-file-name
277 (string-match epa-file-name-regexp buffer-file-name)
278 epa-file-inhibit-auto-save)
280 (set-buffer-modified-p nil))
282 (defun epa-file-select-keys ()
283 "Select recipients for encryption."
285 (make-local-variable 'epa-file-encrypt-to)
286 (setq epa-file-encrypt-to
289 "Select recipents for encryption.
290 If no one is selected, symmetric encryption will be performed. ")))
293 (defun epa-file-enable ()
295 (if (memq epa-file-handler file-name-handler-alist)
296 (message "`epa-file' already enabled")
297 (setq file-name-handler-alist
298 (cons epa-file-handler file-name-handler-alist))
299 (add-hook 'find-file-hooks 'epa-file-find-file-hook)
300 (setq auto-mode-alist (cons epa-file-auto-mode-alist-entry auto-mode-alist))
301 (message "`epa-file' enabled")))
304 (defun epa-file-disable ()
306 (if (memq epa-file-handler file-name-handler-alist)
308 (setq file-name-handler-alist
309 (delq epa-file-handler file-name-handler-alist))
310 (remove-hook 'find-file-hooks 'epa-file-find-file-hook)
311 (setq auto-mode-alist (delq epa-file-auto-mode-alist-entry
313 (message "`epa-file' disabled"))
314 (message "`epa-file' already disabled")))
318 ;;; epa-file.el ends here