GostPlugin
GostPlugin copied to clipboard
An implementation of GOST R 34.12-2015 cipher for KeePass
GostPlugin
Enables KeePass 2.x to encrypt databases using the GOST R 34.12-2015 algorithm.
Latest 2.0 release is incompatible with older 1.x versions and then should be used with caution
Features
- Implementation of two ciphers defined within GOST R 34.12-2015: Kuznyechik and Magma (formely GOST 28147-89)
- Both ciphers use 256-bit key; Kuznyechik handles 128-bit blocks and Magma – 64-bit blocks
- This implementation uses Cipher Feedback (CFB) mode
Installation
- Download latest release
- Make sure that calculated checksum for
GostPlugin.zip
matches specified on release page - Unzip and verify digital signature of
GostPlugin.dll
assembly - Simply copy
GostPlugin.dll
to your KeePass directory and restart the application
If you're migrating from 1.x version, then change database encryption algorithm to AES before replacing plugin DLL.
Usage
- Make sure that
GOST R 34.12-2015 Plugin
is listed in Tools → Plugins... dialog - Switch encryption algorithm in your database's options dialog as described in Database Settings section of KeePass documentation
Acknowledgements
- Reddit community and PolyPill for their commitment to quality of the code by conducting code review
- Habrahabr community, sftp, milabs for their feedback and valuable support in performance optimization techniques
- Michael Ospanov for reporting and resolving Addition Modulo 2^32 bug and performance improvement suggestions
- Markku-Juhani O. Saarinen for Kuznyechik implementation