kpcli icon indicating copy to clipboard operation
kpcli copied to clipboard

Performance opening/decrypting database

Open iridos opened this issue 2 years ago • 0 comments

Hi, I just had a look as keepassxc ( https://github.com/keepassxreboot/keepassxc/ )and kpcli seems better for my usecase in pretty much every regard except one.

With keepassxc I created a test database therein with more encryption iterations (193548380) that takes ~8 seconds opening time with keepassxc. Opening the same file with kpcli takes 110 seconds.

More iterations should be useful to some degree against bruteforcing and would be generally desireable, but not feasible to a useful degree with kpcli if it takes ~ factor 10 longer than other implementations.

This is probably an issue with the underlying cryptography.fernet module which is a pure-python implementation(?).

Maybe switching to https://pypi.org/project/pycryptodome/ could be an option? No idea how difficult such a switch would be though.

Best, I.

iridos avatar Dec 28 '23 13:12 iridos