search

cosmocode / dokuwiki-plugin-encryptedpasswords

Store 256 bit AES encrypted text in your DokuWiki pages. by Wolfgang Reszel
https://www.dokuwiki.org/plugin:encryptedpasswords
GNU General Public License v2.0
2 stars 7 forks source link

Old passwords cannot decrypted with Safari #8

Open github-for-wiesan opened 2 years ago

github-for-wiesan commented 2 years ago

We upgraded to Igor and updated the encrypted-plugin to the newest version.

But if I want to decrypt „old“ passwords on a Mac with Safari, I get only a bunch of signs. With Firefox on the same system it works fine. Same problem on iPhones. I can encrypt and decrypt new passwords, but not „old“ one (probably the md5-ones).

decrypt-old-password-with-mac02

Please help and thank you :-)

splitbrain commented 2 years ago

Any errors in the JavaScript console?

github-for-wiesan commented 2 years ago

Sorry, no error-message, but a warning: „AES-CBC and AES-CTR do not provide authentication by default, and implementing it manually can result in minor, but serious mistakes. We recommended using authenticated encryption like AES-GCM to protect against chosen-ciphertext attacks.“ This message appears also if the password is stored with the new method and as well with the correct password as with a false one. Maybe we are too stupid to use the console. The symbols appear also when the password is wrong. But then, the symbols are different to the ones if the password is correct. If you want to see this live, I surely can arrange a video call with ones of our Mac-Users.