Re: [Passwordsafe-devel] redesign and XML

[<mul...@in...>]

Graham Ullrich writes:
>
>
>XML En/Decryption Practices
>My implementation of XML encryption and decryption may not be the best. When
>writing the file I create an entire XML document in plaintext and then call
>_writecbc() on the entire block. The reverse applies to reads. This may not
>be optimal. CMarkup uses CStrings, but we are allowed to change the CMarkup
>source code and could easily change that to CMyString or whatever class we
>desired. After decryption each record is saved as encrypted elements of a
>CItemData object just like we use now.

Do you mean you create an XML document with all of the accounts in it, then
encrypt the entire thing?  It sounds like you stick encrypted CItemData
objects into the XML document, then encrypt the entire thing.  Is that right?

I'd be curious to see the format of the XML document.

-Andy