Are there Encryption/Security Issues

inhinias / Arcanum

A small tool for saving encrypted passwords in a database.

GNU General Public License v3.0

5 stars 1 forks source link

Open inhinias opened 5 years ago

inhinias commented 5 years ago

Here are some I know of:

Use hash of the users password for encryption
Use salt so no encrypted entry in the database look the same (Existed but removed due to issues!)
Improve enc and decryption speed (Got a lot better due to not encrypting non essential stuff)
The decryption causes the entire program to freeze and only the progress bar and console show it didn't hang itself. (Move decryption into a separate thread.) Other issues are likely to be present but I'm currently unaware of them.

inhinias commented 5 years ago

RSA may help speed up decryption. Using an encrypted private key in the database which gets decrypted with the login password.