aboutsummaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
Diffstat (limited to 'README')
-rw-r--r--README36
1 files changed, 36 insertions, 0 deletions
diff --git a/README b/README
index 0f77dc2..7d22529 100644
--- a/README
+++ b/README
@@ -79,6 +79,42 @@ Fill it with your friends key IDs. Now encrypt a secret just for then:
In other words, if keyringer finds a recipient file matching a given path,
it will use it instead of the global recipients file.
+SSSS Support
+------------
+
+SSSS support comes with "ssss group" files where each file (say
+config/ssss/ssss-groupA) has one recipient file per line.
+
+Command line syntax is:
+
+ keyringer <keyring> ssss-split <secret-name> [ssss-group] [ssss-options]
+
+So if we have:
+
+ config/recipients/recipientsA:
+
+ user1@domain
+ user2@domain
+
+ config/recipients/recipientsB
+
+ user3@domain
+ user4@domain
+
+ config/ssss/ssss-groupA:
+
+ recipientsA
+ recipientsB
+
+Then the following command
+
+ keyringer <keyring> ssss-split secret-data ssss-groupA
+
+would split some data into distinct files:
+
+ keys/recipientsA/secret-data.asc: encrypted to user{1,2}@domain
+ keys/recipientsB/secret-data.asc: encrypted to user{3,4}@domain
+
Managing keys
----------------