keepass-rs icon indicating copy to clipboard operation
keepass-rs copied to clipboard

Updated dependecies and fixed issues related to them.

Open Hwatwasthat opened this issue 2 years ago • 0 comments

Could not update the AES dependency as it is affected by the deprecation of block-cipher, no easy replacement for ECB mode required for KDBX versions <4. Could have hacked it with a manual version but decided it was better to get the others up and running with the latest versions (which should bring some performance benefits on some platforms).

Results was changed due to unification of some results value upstream. Seems that there is less differentiation now on the key lengths etc. There is now a padding error that is returned, but should be careful about how that's exposed, as that way leads to oracle attacks if you're not careful. Not necessarily an issue for libraries but something to be born in mind for anything that uses this and returns data to users.

Hwatwasthat avatar Apr 07 '22 09:04 Hwatwasthat