Allows you to open an Enpass 6 vault using SQLCipher's CLI tool

enpass6-sqlcipher-vault-key.go

package main

import (
	"crypto/sha512"
	"encoding/hex"
	"fmt"
	"log"
	"os"
	"os/user"
	"strings"
	"syscall"

	"golang.org/x/crypto/pbkdf2"
	"golang.org/x/crypto/ssh/terminal"
)

const (
	vault = "~/Library/Containers/in.sinew.Enpass6-Desktop-Beta/Data/Documents/Enpass6-Beta/Vaults/primary/vault.enpassdb"
	iter  = 100000
)

func main() {
	pass, err := readPassword()
	if err != nil {
		log.Fatalln(err)
	}

	vaultPath, err := expandTilde(vault)
	if err != nil {
		log.Fatalln(err)
	}

	salt, err := readSalt(vaultPath)
	if err != nil {
		log.Fatalln(err)
	}

	key := pbkdf2.Key([]byte(pass), []byte(salt), iter, 32, sha512.New)
	hexs := strings.ToUpper(hex.EncodeToString(key))

	fmt.Printf("PRAGMA key = \"x'%v'\";\n", hexs)
	fmt.Println("SELECT count(*) FROM sqlite_master;")
}

func expandTilde(s string) (string, error) {
	if strings.Index(s, "~") != 0 {
		return s, nil
	}

	u, err := user.Current()
	if err != nil {
		return "", err
	}

	return strings.Replace(s, "~", u.HomeDir, 1), nil
}

func readPassword() (string, error) {
	fmt.Print("Password: ")

	data, err := terminal.ReadPassword(int(syscall.Stdin))
	if err != nil {
		return "", err
	}

	fmt.Println()

	return strings.TrimSpace(string(data)), nil
}

func readSalt(vault string) ([]byte, error) {
	buf := make([]byte, 16)

	f, err := os.Open(vault)
	if err != nil {
		return nil, err
	}
	defer f.Close()

	if _, err := f.Read(buf); err != nil {
		return nil, err
	}

	return buf, nil
}