Skip to content

Beta 0.2.5 - Add encryption

Choose a tag to compare

View all tags
@OmegaAOL OmegaAOL released this 30 Aug 03:27
· 59 commits to master since this release
beta025
2e70ac2

Important

Adds encryption of handle and password and auto-sign-in if you click "Remember Me". This makes using Cerulean very convenient as you no longer have to log in each time.

Notes on the encryption part:

  • On Windows 2000 and up this uses DPAPI ~ really secure, keys, encryption, and decryption are handled by Windows. DPAPI is used by Chrome, Firefox, KeePass, Edge, and Chromium-based apps like Discord and Steam. You should have no problem using your real password security-wise.

  • On legacy versions of Windows (NT4, ME, 98) this uses AES-256 with an insecure key. Really only surface level encryption (fine for most generic viruses/bad actors, but anybody dedicated looking through the Cerulean source code will be able to decrypt). Recommend you use an app password.

  • Your password is (now) never stored in plaintext. This insecure practice was present from Alpha 0.0.1 -> Beta 0.2.0. It is important to update from those versions to Beta 0.2.5 as soon as possible.

Roadmap for next release

  • True async. This might not sound like much but it'll take care of 99% of Ceruleans bugs. Troublesome to implement in .NETfx2.0 though
Assets 3
Loading