文字列をopensslで暗号化/復号するbashスクリプト

encrypt.sh

#!/usr/bin/env bash
set -eu

function die () {
    echo "$@" 1>&2
    echo 'encrypt.sh [-e|-d|--encrypt|--decrypt|] --body [base64enc or securing phrase]'
    exit 1
}

mode=
body=

for OPT in "$@"; do
    case $OPT in
        '-h' | '--help')
            die
            shift
            ;;
        '-e' | '--encrypt')
            mode=encrypt
            shift
            ;;
        '-d' | '--decrypt')
            mode=decrypt
            shift
            ;;
        '--body')
            body=$2
            shift 2
            ;;
    esac
done

# 必須の引数チェック
test -z "$mode" && die "--mode required"
test -z "$body" && die "--body required"

read -sp "enter password: " password
echo "" >&2  # プロンプトに改行をつける

function encrypt () {
    openssl aes-256-cbc -e \
        -in <(echo $body) \
        -pass pass:$password  \
        | base64
}

function decrypt () {
    openssl aes-256-cbc -d \
        -in <(echo $body | base64 -d) \
        -pass pass:$password
}

if [ "$mode" == "encrypt" ]; then
    encrypt
elif [ "$mode" == "decrypt" ]; then
    decrypt
fi