Skip to content

KeePassQuickUnlock 2.3.0

Compare
Choose a tag to compare
@KN4CK3R KN4CK3R released this 06 Nov 22:17
· 9 commits to master since this release

Removed comparison of the QuickUnlock key and the input of the user. Instead this version encrypts the master key of the database with the QuickUnlock key and decrypts the master key with the user input. If wrong user input is provided the decryption just generates garbage and the database stays locked. On older versions an attacker could simply patch the comparison to unlock the database. That's not really a problem because of https://keepass.info/help/base/security.html#secspecattacks (tl;dr: "If a bad guy can persuade you to run his program on your computer, it's not your computer anymore")

07.11.2017: Please redownload. Old plgx file shows 2.2 as version.