Windows 10 Agent mode KeePass freeze - Githubissues

dlech / KeeAgent

ssh agent plugin for KeePass 2.x

http://lechnology.com/software/keeagent

Other

522 stars 35 forks source link

Windows 10 Agent mode KeePass freeze #337

Closed schklom closed 2 years ago

schklom commented 2 years ago

Hello, I think I have a bug.

Note that I could be doing something wrong since no one else seems to have the same issue as me.

Config KeeAgent

Agent mode: Client
Option Enable agent for Windows OpenSSH (experimental) enabled (otherwise, a loaded key cannot be used by ssh. Disabling this does not solve the problem)
An entry with a passphrase protected private key (type ED25519, size 256, passphrase 64 characters)
No key is loaded.

Config Windows 10

Service OpenSSH Authentication Agent is disabled.
Opening Pageant gives me the message Pageant is already running. Should I stop it?

Problem

Check Allow KeeAgent to use this entry in the entry
Pick the private key file
Click OK
Close entry
Open other entry/folder or simply select another entry
KeePass freezes (becomes unresponsive) for 5-10 seconds while using around 17% CPU

Noteworthy

The private key can be loaded manually from file into KeeAgent (without relying on the KeePass entry) and works with the command line ssh.

When loaded from KeePass entry, the private key does not work with the command line ssh

Question

Does anyone have any idea what is going on?

Many thanks :)

dlech commented 2 years ago

Can you generate a new key that causes this problem and attach it to the issue (email attachments don't work - put it in a .zip and use the web interface to attach to a new comment).

dlech commented 2 years ago

I have a feeling that the problem is that new private key encryption is intentionally CPU intensive and some mechanism in KeePass is triggering a read of the public key hash which requires decrypting the key.

schklom commented 2 years ago

@dlech This one causes the same issue and I don't use it: test.zip Its passphrase is 8D9C02B767356573C8CB68CED55CA4A076CBEED0F95CE1CE1D1D00BD9B2403E6 (64 characters) I generated it with ssh-keygen -t ed25519 -a 250 -f test

Having a shorter passphrase (26 characters) provokes less freezes and they last a shorter time, but it is still too much especially since I plan to have more than one key loaded.

I wouldn't mind if the CPU intensive operations happen when I use the key, but they go on whenever I do anything on KeePass. Should I make an issue on the KeePass repo, or is this a KeeAgent problem?

dlech commented 2 years ago

Thanks. I can confirm seeing the delay. I will look into it more later.

schklom commented 2 years ago

@dlech Thanks :)

dlech commented 2 years ago

This is probably the same problem as #243.

schklom commented 2 years ago

I hadn't seen that issue, oops.

I agree it is likely the same problem. I'll monitor that issue and close this one when it gets fixed in case it is not the same problem.

dlech commented 2 years ago

should be fixed in https://github.com/dlech/KeeAgent/releases/tag/v0.13.1