Re: [cryptography] Peer review request - Loplop

2012-11-16 Thread Kyle Creyts
giving it an extremely brief run-through, I'd say that you've made a different compromise than the app-maker chose in making the limit 8. the choice of 8 base64 digits out of the 24 given by the md5 appears to have been explicitly done to combat attempts to attack the master password, or other acc

Re: [cryptography] Peer review request - Loplop

2012-11-16 Thread Uncle Zzzen
On Sat, Nov 17, 2012 at 1:10 AM, Jeffrey Walton wrote: > On Fri, Nov 16, 2012 at 12:34 PM, Uncle Zzzen > wrote: > > Hi. > > I need peer review for loplop > > https://github.com/thedod/loplop > For the whole scheme, or just the change? The whole scheme (including the change), or course. If it's

Re: [cryptography] Peer review request - Loplop

2012-11-16 Thread Jeffrey Walton
On Fri, Nov 16, 2012 at 12:34 PM, Uncle Zzzen wrote: > Hi. > I need peer review for loplop > https://github.com/thedod/loplop For the whole scheme, or just the change? If its the whole scheme, a recent discussion relating to password managers can be found at "Master Password," http://lists.randomb

[cryptography] Peer review request - Loplop

2012-11-16 Thread Uncle Zzzen
Hi. I need peer review for loplop https://github.com/thedod/loplop The code in question is 40 lines of python: https://github.com/thedod/loplop/blob/master/CLI/__init__.py It's a fork of the oplop stateless password manager http://code.google.com/p/oplop/ What I've changed was to allow for passwo