search

c3ypt1c / PasswordManager

Internet Nomad password manager
MIT License
2 stars 2 forks source link

Identity changes can be detected by comparing the container blocks #16

Closed c3ypt1c closed 2 years ago

c3ypt1c commented 3 years ago

While there is no data leak, it is possible to see where the changes started to happen. Need a way to randomize or pad the first few bytes of the Blowfish encryption function. https://github.com/c3ypt1c/PasswordManager/blob/81c357fdbe70d4e308964ab8e37d2c6b3f699f2b/src/crypto/CryptoFunctions.ts#L68

c3ypt1c commented 3 years ago

This explains the problem better than I can: https://crypto.stackexchange.com/questions/57645/is-using-the-same-iv-in-aes-similar-to-not-using-an-iv-in-the-first-place/57646