commonfare-net / secrets Goto Github PK

https://github.com/PIENews/secrets/blob/win/secrets.nsi#L26

Popping the Task Manager in Windows is now done with Ctrl+Shift+Esc instead of the old known Ctrl+Alt+Del (which now leads to a middleman screen with some more options and not running the Task Manager)

Just a note :)

Right now the encryption scheme is too weak as the crypto salt used is publicly hard-coded in the defaults.

To make Secrets ready for production use the salt should be either:
1- made configurable per-installation
2- included within the shared secrets
3- given by the user as a "name" for the key

1 and 2 can be long enough to avoid rainbow-table attacks, the 3 is somehow flaky as a mnemonic may be too short for a proper salt.