ayushnix / pass-coffin

A password store extension to hide data inside a signed and encrypted coffin
GNU General Public License v3.0
41 stars 3 forks source link

information leak when incorrect password is supplied for `n` attempts and a correct password is then given #3

Closed ayushnix closed 2 years ago

ayushnix commented 2 years ago

If you supply an incorrect password for 3 attempts, on the next correct attempt, binary data is printed on stdout.