maemo.org Bugzilla – Bug 6383
Add support for V3 Format
Last modified: 2014-03-08 10:27:34 UTC
You need to
before you can comment on or make changes to this bug.
(Settings > General > About product)
Password Safe 1.5.5
EXACT STEPS LEADING TO PROBLEM:
(Explain in detail what you do (e.g. tap on OK) and what you see (e.g. message
Connection Failed appears))
1. Open File .psafe3
2. Enter master password
3. Leads to "wrong password" while it's actually right
Adding V3 format support it would just open and works.
Can't open it
(always, less than 1/10, 5/10, 9/10)
EXTRA SOFTWARE INSTALLED:
I know it's not supported in this version but it's going to be in future
release? Or is already avaiable a compatible testing version?
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; it; rv:188.8.131.52)
Not yet supported ...
I'll try and find some time to investigate the work load associated ...
This might be a little more serious than meets the eye as the V1 and V2
versions of the PasswordSafe file format are affected by several
vulnerabilities (this has been known since 2005:
Just wondering Fred, are you currently working on this or is this something you
would welcome help on? I happen to have few days of holiday left ;-)
No I'm not : feel free ;)
*** Bug 9455 has been marked as a duplicate of this bug. ***
was the workload assessed for this? how much work was done investigating it,
i.e. can it be handed off?
I have spent a fair amount of time working on this. It's non-trivial as it
involves migrating to a newer (and now non-mainstream) of Scheiner's encryption
algorithm: Blowfish. There's also an upgrade to the file format itself. The
work is being done so that the program continues to be backward compatible with
older versions of the format.
I suspect it's probably another few weeks away, given that I'm working on this
in my spare time. Suggestions are welcome obviously.
^^ Sorry, I meant Twofish (http://www.schneier.com/twofish.html), not Blowfish
Would you like me to accept the bug and assign it to you so that everybody
knows that there's something going on ?
Sure, by all means!
Christian is working on this ;)
> I suspect it's probably another few weeks away, given that I'm working on this
> in my spare time. Suggestions are welcome obviously.
I'd love to see the code; is it checked in somewhere?
(In reply to comment #11)
> > I suspect it's probably another few weeks away, given that I'm working on this
> > in my spare time. Suggestions are welcome obviously.
> I'd love to see the code; is it checked in somewhere?
Help yourself: https://garage.maemo.org/scm/?group_id=46
Platform item: Windows?
There is already a Windows program that handles v3 format:
The problem is: if you open a v2 database with this program and then
simple close it, the v2 database is overwritten with v3 format and you
cannot read it on the N900 anymore!