Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

All non alphabets and non numbers are treated as spaces in password . #43

Open
Anish-M-code opened this issue Jul 12, 2022 · 3 comments
Assignees
Labels
bug Something isn't working good first issue Good for newcomers help wanted Extra attention is needed security

Comments

@Anish-M-code
Copy link
Collaborator

Anish-M-code commented Jul 12, 2022

Due to pysecret integration all non alphabets and non numbers are treated as spaces in password which is used to derive key to encrypt the password store , this reduces the security of password manager. It is recommended to remove pysecret integration to fix this issue.
We should use password key derivation function like pbkdf2_hmac from hashlib to derive key securely.

Due to time and budget constraints , we can wait for some sponsor to fund us to fix this issue or make this project available to open source communities like up-for-grabs or open source friday or even during events like Hactoberfest.

@vishisht-dubey
Copy link

hey, I would like to contribute to this please assign me this.

@gowtham758550
Copy link
Owner

@vishisht08 Sure.

@Anish-M-code
Copy link
Collaborator Author

Anish-M-code commented Nov 12, 2022

@vishisht08 Are you still interested on working on this issue? @gowtham758550 i guess pysecret integration is quite offering very limited support to this project, in terms of password restrictions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working good first issue Good for newcomers help wanted Extra attention is needed security
Projects
None yet
Development

No branches or pull requests

3 participants