Java
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
config
doc
lib/bouncycastle
reference
screenshots
src/goryachev
tools
.classpath
.gitignore
.project
Feature Matrix.xlsx
Known Issues.md
LICENSE
Readme.md
Release Notes.md
build.xml
version

Readme.md

Passwørd Safe

A simple, secure password storage tool which allows you to keep all your passwords in one encrypted file. For Windows, Mac, Linux, Solaris.

alt text

Why?

This application is inspired by Bruce Schneier's Password Safe program.

At first, I needed to have a cross-platform tool that I could run on Mac and Linux.

Then I discovered that a SHA-256 hash of the stretched key in the original Password Safe file is provided in the clear. The documentation explains that it "is used to verify that the user has the correct passphrase". I am not so sure. I don't know if the opposition has rainbow tables or specialized hardware to brute force a 256 bit hashes, but it feels like a backdoor. In any case, this goal that can be easily achieved in a more secure way by using, for instance, authenticated encryption.

Encrypted data file format specification.

License

This project and its source code is licensed under the Apache License 2.0 and you should feel free to make adaptations of this work. Please see the included LICENSE file for further details.

Official Site

goryachev.com

Project Status

Release Notes

Known Issues