prehistoric-systems/keepassxc-browser
1
0
Fork 0
mirror of https://github.com/keepassxreboot/keepassxc-browser.git synced 2026-03-11 08:54:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Allows a separate ID key for association

Browse source
This commit is contained in:
varjolintu 2018-08-07 08:28:50 +03:00 committed by Jonathan White
parent 0ad4475fa8
commit 6e3f1de5fb
2 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
keepassxc-browser/background/keepass.js
View file

@ -371,10 +371,13 @@ keepass.associate = function(callback, tab) {
const key = nacl.util.encodeBase64(keepass.keyPair.publicKey);
const nonce = keepass.getNonce();
const incrementedNonce = keepass.incrementedNonce(nonce);
const idKeyPair = nacl.box.keyPair();
const idKey = nacl.util.encodeBase64(idKeyPair.publicKey);
const messageData = {
action: kpAction,
key: key
key: key,
idKey: idKey
};
const request = {
@ -402,7 +405,7 @@ keepass.associate = function(callback, tab) {
keepass.handleError(tab, kpErrors.ASSOCIATION_FAILED);
}
else {
keepass.setCryptoKey(id, key); // Save the current public key as id key for the database
keepass.setCryptoKey(id, idKey); // Save the new identification public key as id key for the database
keepass.associated.value = true;
keepass.associated.hash = parsed.hash || 0;
}

5
keepassxc-protocol.md
View file

@ -8,7 +8,7 @@ Now the requests are encrypted by [TweetNaCl.js](https://github.com/dchest/tweet
3. All messages between the browser extension and KeePassXC are now encrypted.
4. When keepassxc-browser sends a message it is encrypted with KeePassXC's public key, a random generated nonce and keepassxc-browser's secret key.
5. When KeePassXC sends a message it is encrypted with keepassxc-browser's public key and an incremented nonce.
6. Databases are stored based on the current public key used with `associate`. A new key pair for data transfer is generated each time keepassxc-browser is launched. This saved key is not used again, as it's only used for identification.
6. Databases are stored with newly created public key used with `associate`. A new key pair for data transfer is generated each time keepassxc-browser is launched. This saved key is not used again, as it's only used for identification.
Encrypted messages are built with these JSON parameters:
- action - `test-associate`, `associate`, `get-logins`, `get-logins-count`, `set-login`...
@ -71,7 +71,8 @@ Unencrypted message:
```javascript
{
"action": "associate",
"key": "<current public key>"
"key": "<current public key>",
"idKey": "<a new identification key>"
}
```