search

sekoyo / SecurePad

SecurePad - A Notepad++ plugin for securely encrypting data
38 stars 10 forks source link

encrypt/decrypt a selected text with big issue #14

Open pulsar14 opened 2 years ago

pulsar14 commented 2 years ago

First time I use your N++ plugin ... 1) select in N++ some Text 2) encrypt selected text with pass = x 3) decrypt selected text with pass = xx the text is correctly decrypted! .... What?

TODOOOOOOOO !!!!!!!!!!   ---> encrypt with key "x" ---> 8BD850D30D2346F70383E0674EEF6532CDD4346394A2FC73
8BD850D30D2346F70383E0674EEF6532CDD4346394A2FC73  ---> dencrypted with key "xx" ---> TODOOOOOOOO !!!!!!!!!!

Wow!!! Idem if I choose any keys like: xxx, xxxx, xxxxx .....

Compliments for the basic security!

chcg commented 2 years ago

Apart from using just x as passphrase is obviously not sufficient, see readme:

though of course it is always advised that you use a reasonably complex password

It is a strange behaviour that multiplying the passphrase is working not just for e.g. 'x' or 'y', but also for e.g. 'abc'. Probably there should be at least a check of the minimum length of the passphrase and probably also the variance.