search

keeweb / kdbxweb

Web Kdbx library
https://app.keeweb.info
MIT License
409 stars 57 forks source link

Why ECB? #12

Closed dulac closed 7 years ago

dulac commented 7 years ago

Hi there! Could you please describe why is Electronic Codebook (ECB) simulation and ECB fallback used in kdbxweb/lib/crypto/key-encryptor.js ?

ECB does not provide strong confidentiality.

antelle commented 7 years ago

It's key derivation function, not encryption one. Further questions about format design please ask on KeePass forum, not here, we are not designing storage format.

antelle commented 7 years ago

A bit more info: new KeePass format is not finalized yet, and any ideas are welcome. Format description: http://keepass.info/help/kb/kdbx_4.html, you can suggest your ideas here: https://sourceforge.net/p/keepass/discussion/329220/thread/acfd14b1/