Mirror of forum.nim-lang.org

960 :: I wrote a password manager in nim lang

• sepisoad (orginal) [2015-03-03T18:17:20+01:00] view original

  hey there everyone. A couple of weeks ago I read about nim lang on hacker news and immediately fell in love with the language, so in order to learn how to program using it I decided to write a real application and the result is called "Condooj", a simple cli based password manager. the code is hosted on github, but it is still a work in progress. this is the link: https://github.com/sepisoad/condooj

  I'm just so excited and happy to be part of this awesome community. cheers.

---

• fadg44a3w4fe (orginal) [2015-03-03T22:27:22+01:00] view original

  Looks neat, but the crypto needs some work:

  • create_passphrase_digest should use bcrypt or scrypt. A single sha256 will not prevent brute-force attacks.
  • aes_encrypt isn't supposed to be used like that. It means you're using ECB mode, which basically is totally broken.
  • You need a method of authentication. CCM Mode seems like a good choice, and by coincidence your AES implementation includes it! Read the Wikipedia page and RFC 3610 several times, you can't afford any mistakes here.

---

• sepisoad (orginal) [2015-03-04T21:05:54+01:00] view original

  thanks for the advices @fadg44a3w4fe, I will take note and surely improve the encryption stuff

---