3 ms·
+1 hope this comment is top. They use it for salt and password generation: https://github.com/oormicreations/OormiPass/blob/1a6f0b99613bb7020edb01cc91b6aafb440
by badrabbit 8y ago
+1 hope this comment is top.
They use it for salt and password generation: https://github.com/oormicreations/OormiPass/blob/1a6f0b99613bb7020edb01cc91b6aafb44025f8d/src/oormipassMain.cpp#L966 https://github.com/oormicreations/OormiPass/blob/1a6f0b99613...
Also,
> The master password is not stored. An SHA256 salted hash is stored instead.
Have they heard of scrypt or argon2? And they're not using a KDF(!!!!!!) With sha256.
Dear Authors,if you ever read this,please look at:
https://cryptopp.com/wiki/Key_Derivation_Function https://cryptopp.com/wiki/Key_Derivation_Function
And
https://cryptopp.com/wiki/RandomNumberGenerator https://cryptopp.com/wiki/RandomNumberGenerator
- deleted 8y ago[deleted]