Key File have the same length that the password
Status: Pre-Alpha
Brought to you by:
loloftherings
The hash is not very secure, the lenght of the data of the key file is the same that the real password, the solution of this is change the hash, i say to use a cientifical aproved one like whirpool or more simple md5. If the bug is not corrected a brute-force attack will take a lot of less time
(sorry for the english)
I've been cracking and bashing my mind for a good solution to store a password, but this is indeed still a weakness. md5or whirlpool is a good idea. This will make it much stronger.
and a triple md5??? ¿do you understand me? you hash the hash of the hash so hash the final hash need to cracker 2 32 lenght hash and then hash another one (very, very long......), this for the key file, but for encrypt the files you can use a aes-128 encryptation with a whirpool of the real key (128 lenghts)
(dificult to understand, i know)
Allright.. I think I might possibly understand after reading this three times, but I'm clueless how to convert this into source code :)
join me to the proyect abd i help you....