Replace Passpack with native WebCrypto API

markashleybell-org / vault

A simple web app for storing encrypted login/password details.

0 stars 1 forks source link

Replace Passpack with native WebCrypto API #119

Closed markashleybell closed 5 years ago

markashleybell commented 5 years ago

See this thread for some useful advice.

markashleybell commented 5 years ago

A couple more helpful reads:

markashleybell commented 5 years ago

Note that the aesGcmEncrypt and aesGcmDecrypt use TextEncoder, which isn't supported in anything but the latest browsers, and even the latest Edge doesn't support it.

markashleybell commented 5 years ago

[x] Replace cryptography implementations
[x] Fix test suite
[x] Clean up PasswordSpecification code
[x] Clean up Cryptography.generatePassword (ported from Passpack)
[x] Clean up Cryptography.getPasswordBits (ported from Passpack)
[x] Crypto functions re-hash the plain text master key - can we just pass it in as it is in memory?

markashleybell commented 5 years ago

Checks: https://www.grc.com/haystack.htm