search

openbikesensor / OpenBikeSensorFirmware

Overtaking distance measurements for cyclists
https://www.openbikesensor.org/
GNU Lesser General Public License v3.0
110 stars 25 forks source link

How to implement an encryption for the wifi password? #190

Open Halbelunge opened 3 years ago

Halbelunge commented 3 years ago

How can we implement a encryption for the wifi password without storing a private key and without entering a password each time.

Store the private key in EEPROM? and only the encrypted PW on the SD card?

I look for a RSA encryption lib.

amandel commented 3 years ago

See also #119

mega-stoffel commented 3 years ago

and furthermore: would it be possible to use a different type of "input-field"? From early web-form programming I learned, there's a "password" input type. Entries in these forms are not stored in the browser's AutoFill. But by using the OBS config my WIFI password is stored in the mobile Chrome browser's AutoFill.

amandel commented 3 years ago

@mega-stoffel - the input is of type password and so should be treated as your browser treats every password (typically by not displaying the input and treating it as secret). Can you point to the concrete field you refer to and the browser you use?

amandel commented 2 years ago

Actually the password is not stored on the SD card (it never was) but in the ESP internal flash memory. It is exposed in clear-text with the configuration backup.