Miroirs/secret
1
0
Fork 0
mirror of https://github.com/angt/secret synced 2024-11-16 19:48:05 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add some randomness in secrets

Browse source 
Signed-off-by: Adrien Gallouët <adrien@gallouet.fr>
This commit is contained in:
Adrien Gallouët 2020-04-29 20:32:36 +00:00
parent a5e5c9b09e
commit b256e45ceb
1 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
secret.c
View file

@ -305,10 +305,13 @@ s_set_secret(int fd, const char *key, const unsigned char *secret, size_t slen)
if (len + slen + 1 > sizeof(s.x.entry.msg))
s_fatal("Entry too big!");
hydro_memzero(&s.x.entry, sizeof(s.x.entry));
store16_le(s.x.entry.slen, slen);
memcpy(s.x.entry.msg, key, len);
memcpy(s.x.entry.msg + len + 1, secret, slen);
size_t t = 0;
memcpy(s.x.entry.msg, key, len); t += len;
s.x.entry.msg[t] = 0; t += 1;
memcpy(s.x.entry.msg + t, secret, slen); t += slen;
hydro_random_buf(s.x.entry.msg + t, sizeof(s.x.entry.msg) - t);
hydro_secretbox_encrypt(s.enc,
&s.x.entry, sizeof(s.x.entry), 0,
@ -462,6 +465,7 @@ s_pass(int argc, char **argv, void *data)
if (r)
s_oops(__LINE__);
}
s_normalize_and_show(buf, S_PWDGENLEN);
return 0;
}