google-code-export / cpassman

Automatically exported from code.google.com/p/cpassman
0 stars 0 forks source link

What if you forget your SALT Key? How to reset? #228

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. This is a general question

What is the expected output? What do you see instead?
N/A

What version of the product are you using?
Teampass 2.0

On what operating system? With what Browser (IEx, FFx, ...)
N/A

Please provide any additional information below.
I could not locate any teampass forums so I am asking here which is not really 
an issue I have but more of a general question. What happens if someone forgets 
their SALT Key? How can this be recovered or reset enabling them to enter a new 
one?

Original issue reported on code.google.com by hexxamil...@gmail.com on 3 Jan 2012 at 11:13

GoogleCodeExporter commented 9 years ago
Hello,

If a user forgot his/hers saltkey then the items are lost.
Indeed this saltkey is used as the encryption key. So without it, the 
decryption is wrong.
There is no way to recover the items ... this is the "heart" of the security of 
the database. If there was an algorithm to recover them, then it would be 
security hole.

Nils

Original comment by nils.cpa...@gmail.com on 4 Jan 2012 at 7:44

GoogleCodeExporter commented 9 years ago
Sounds good to me. Just thought I would ask because I'm sure one day this
may happen. So I guess my next question would be is it possible to recreate
the personal folder forcing them to enter a new salt key..of course old
items would be lost.

-- Sent from my awesome Droid Bionic.

Original comment by hexxamil...@gmail.com on 4 Jan 2012 at 8:06

GoogleCodeExporter commented 9 years ago
Yes I think it could be feasible.

I'll check how to do that.

Original comment by nils.cpa...@gmail.com on 24 Jan 2012 at 8:51

GoogleCodeExporter commented 9 years ago
implemented in 2.1.7

Original comment by nils.cpa...@gmail.com on 7 Apr 2012 at 11:46