issue with addEntropy in sjcl.js

tildaslash / RatticWeb

Password Management for Humans

http://rattic.org/

GNU General Public License v2.0

474 stars 149 forks source link

issue with addEntropy in sjcl.js #247

Open Twistedpear opened 10 years ago

Twistedpear commented 10 years ago

screen shot 2014-04-10 at 1 24 21 pm

Found the following issue on Chrome Version 33.0.1750.152 on the demo site. Hardware is a MaccBook Pro (MacBookPro9,2) running OS X 10.9.2 (13C64)

To reproduce

Log in to Rattic
View the first password on the list
Right click on the password and select 'Inspect Element' (need dev tools enabled)

smarthall commented 10 years ago

Looks like this affects machines with accelerators. Its a bug in the bitwiseshiftleft/sjcl#142.

smarthall commented 10 years ago

Also note this does not affect the amount of entropy available to the password generator, there are still several other sources of entropy available to the library. This only affects the console page.

smarthall commented 10 years ago

This change appears to be fixed in sjcl master. Upon the next release we should update to close this issue.