search

keeweb / kdbxweb

Web Kdbx library
https://app.keeweb.info
MIT License
416 stars 58 forks source link

[feature request] - Using AES-GCM instead of CBC #55

Open Sparkenstein opened 5 months ago

Sparkenstein commented 5 months ago

I was developing some small utility, I got this warning in the browser:

image

AES-CBC and AES-CTR do not provide authentication by default, 
and implementing it manually can result in minor, but serious mistakes. 
We recommended using authenticated encryption like AES-GCM to protect 
against chosen-ciphertext attacks.

Which makes sense, KDBX is used for storing data alongside secrets, GCM helps in checking if data is tampered or not. Should look into it

Sparkenstein commented 2 weeks ago

I am assuming the project is dead