You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -26,11 +25,11 @@ The project has not yet received any formal / official security reviews. Use it
26
25
27
26
### Security
28
27
29
-
* The data is locked with a user-defined master password, using_bcrypt_ password hashing
30
-
* Encryption using _AES_ with_CTR_ mode
28
+
* The data is encrypted using a user-defined master password, with_bcrypt_ password hashing
29
+
* Encryption using _AES 256_ in_CTR_ mode
31
30
* Data integrity checks with SHA3 (Keccak)
32
31
* During runtime, the passwords are kept encrypted in memory
33
-
* During runtime, the encryption keys are stored in safe, non-swappable memory
32
+
* During runtime, encryption keys are stored in safe, non-swappable memory
34
33
* Upon saving, the encryption keys change, even if the user master password remains the same. This results to different encrypted products, even if the data that is being encrypted is the same.
35
34
* Passphrases generation using [Diceware](https://theworld.com/~reinhold/diceware.html).
36
35
* Passwords health check against [pwned passwords list](https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/), leveraging the [k-anonimity API](https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/).
0 commit comments