5 ms·
This is incredibly similar to my side project Cassidy (except it's built on top of vault). Same idea though: master password + salt + site. https://cassidy.nic
by nicinabox 11y ago
This is incredibly similar to my side project Cassidy (except it's built on top of vault). Same idea though: master password + salt + site.
https://cassidy.nicinabox.com https://cassidy.nicinabox.com
https://github.com/nicinabox/cassidy https://github.com/nicinabox/cassidy
- dannysu 11y agoNice! The interface looks very nicely done. I like that you thought about syncing too. Except personally I don't like storing things on Dropbox but I guess it's just metadata too. I haven't heard of vault, so I looked into it. It looks like it uses CryptoJS with 8 iterations on PBKDF2. I wrote hash0[1], which is the same sort of master password + salt + site but syncs encrypted metadata with server of your choice. I found that while working on hash0, that SJCL's[2] PBKDF2 is faster than CryptoJS's implementation, which means I can perform more iterations faster and get the same result. I switched from CryptoJS to SJCL, and have hash0 do 100,000 iterations instead of vault's 8. [1]: https://github.com/dannysu/hash0 [2]: http://crypto.stanford.edu/sjcl/
- nicinabox 11y agoWow, that's really great to know! I'm going to check this out.
- Ixio 11y agoI also had the same idea a while back except that I didn't have perspiration likes you guys: congrats to you and masterpasswordapp.com for going all the way! I didn't go past proof-of-concept: https://github.com/ixio/e64-bcrypt https://github.com/ixio/e64-bcrypt