Hacker GitHub

← All repos

nrosvall/ylva

View on GitHub ↗ ★ 2 C

Command line password manager for Unix-like operating systems

3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2019-05-05 · latest 2019-05-06

Mentions per year 3 mentions · busiest year 2019 (3)
20082026
AllStoriesComments NewestTopOldest
  1. I'm not a C# expert by any means. Is the IntegrityHash of the plaintext, and not the ciphertext? https://github.com/nrosvall/ylva/blob/2a4afcfb3727151fa09fdd... That would be a really serious flaw. If not, hand rolled AES-CBC-SHA256....…
    comment by ejcx · 2019-05-06 · in New, portable, open source password manager for Windows
  2. …the way, even Microsoft's own documentation doesn't use constant-time comparisons for HMAC[2]!) [1] https://github.com/nrosvall/ylva/blob/2a4afcfb3727151fa09fdd... [2] See the example on https://docs.microsoft.com/en-us/dotnet/api/system.se…
    comment by beefhash · 2019-05-06 · in New, portable, open source password manager for Windows
  3. …decrypted file on-disk[1]. That seems like a huge vulnerability if you don't have FDE enabled. [1] https://github.com/nrosvall/ylva/blob/2a4afcfb3727151fa09fdd... https://github.com/nrosvall/ylva/blob/2a4afcfb3727151fa09fdd...
    comment by gruez · 2019-05-05 · in New, portable, open source password manager for Windows