rvp-nl

Results 8 comments of rvp-nl

Why does this need to know the private key for challenge-response?

Read here: https://sourceforge.net/p/keepass/discussion/329220/thread/1a490c90/ And other threads about keechallenge safety/security Author disappeared, current maintainer does not answer questions.

Improve security with rolling Challenge-Response, HMAC into Scrypt function

Has this been followed up?

Improve security with rolling Challenge-Response, HMAC into Scrypt function

It is a good idea to improve the plugin. Can you outline your approach to using the YubiKey with KeePass for securing offline password databases? A flow diagram and cryptographic...

Improve security with rolling Challenge-Response, HMAC into Scrypt function

@whinis, do you have an update on this?

Improve security with rolling Challenge-Response, HMAC into Scrypt function

How do you plan to obtain CR' for re-encrypting the database?

Improve security with rolling Challenge-Response, HMAC into Scrypt function

Here's a diagram that I created last year in an attempt to understand how Keechallenge handles the secret key. Can you do something similar to outline your approach? ![keechallenge](https://user-images.githubusercontent.com/30962210/42212640-fe567e94-7eb6-11e8-9a32-084d0520eca7.png)

Improve security with rolling Challenge-Response, HMAC into Scrypt function

I tried KeepassXC and actually like the usability it provides for Yubikeys. On each database change one has to touch the Yubikey to confirm the change, that's it. It may...

Improve security with rolling Challenge-Response, HMAC into Scrypt function

Is it possible with the current API to provide a new KPS to KeePass when it writes the database? It would be reasonable from user perspective to confirm changes to...