Stephan Traub

Results 92 comments of Stephan Traub

You tried to encrypt random bytes (like the "key" i generate in the plugin) with different cypher modes. So I understand that you can encrypt and decrypt the random bytes...

Thank you for the clarification! 😉 So in my test I can't reproduce this behavior. But I still testing around with the usage of the AES encryption with CBC if...

Please rename the p7mkey-File to the same name as the database file name and save the (encrypted) key file in the same folder. Example: C:\Test.kdbx (database) - C:\Test.p7mkey (key file).

Nope, the Key-File is encrypted (enveloped) with your (certificate) Pub.-Key. A recommendation is, to protect the Priv.-Key with a PIN or password. For the best security you should use a...

I'll try to reproduce the error. Thanks.

Thanks for the information. I'll have a look into it and see how I can resolve the issue. One main problem is the "Windows Cert-API" witch is not really stable...

fix for #11 can also be a fix for his behavior.

Maybe I update also the configuration options for this to get more transparency for the behavior. Thank you for the suggestion 👍 !! Only SMS or mail challenge needs to...

I updated the code and documentation to disable the trigger if no admin user is defined. But if I send a _empty_ (pass="") authentication request to the pID3A `/validate/check` nevertheless...

Ah, OK. I didn't configure a PIN for that test token. That's the problem - no PIN = empty PIN then a challenge is triggered. I was confused between the...