Open mvdan opened 5 years ago
At minimum bitw
should use mlock(2) to prevent the password from being swapped.
Yes, that's what libraries like memguard above do.
D-Bus encryption to not use "plain" was implemented in https://github.com/mvdan/bitw/issues/17.
I'm not an expert at security by any means. I know enough to get this working, but I'd like some reviews and feedback before people start using this for their own passwords.
Current TODOs:
dh-ietf1024-sha256-aes128-cbc-pkcs7
and discourage the use ofplain
?