aetherweb / aekee Goto Github PK

The code initially commit here was trimmed down from more complex code used behind a login. The variable 'theusername' in that code is loaded with a salted hash and used as a salt when generating the AES key using PBKDF2.

In this repo, 'theusername' is loaded with the un-hashed passphrase. So the passphrase is used (with a salt) to salt itself, during the generation of the AES key.

I suspect this is still strong enough due to the unknown value of the passphrase and the introduction of an additional salt anyway, however it could be better and also this encrypt decrypt system could be used as an offline backup decrypt mechanism for full aeKee users to un-encrypt their exported, encrypted vaults.

The addition of an optional 'extra salt' input field, the value of which is used (if present) in the variable 'theusername' instead of re-using the passphrase there as now, seems appropriate.