RE: XML support in Passwordsafe

Hm,
 
 IIRC, the original intent was for XML import/export to represent all fields
unencrpted, exactly as plantext import/export.

If you wish to encrypt some of the fields, however, there's no need to use a
separate IV for each. You can prompt the user for a passphrase (which
doesn't have to be the safe combination), generate and publish a unique IV,
and encrypt the records you like in CBC mode.

If anyone implements this, I'd be very happy to integrate it in the main
source tree.

	Cheers,

		Rony


________________________________

	From: [email protected]
[mailto:[email protected]] On Behalf Of
Wolfgang Keller
	Sent: Wednesday, July 20, 2005 10:28 PM
	To: [email protected]
	Subject: Re: [Passwordsafe-devel] XML support in Passwordsafe
	
	
	So do I conclude correctly that you are looking for a standardized
representation of a password entry resp. set of entries in their *encrypted*
form? - Interesting. In particular since you would have to include the
actual key-mac and encryption salt value.
	
	- Wolfgang
	
	J. Wren Hunt wrote: 

		Wolfgang Keller wrote:
		  

				I have a need to do some file
imports/exports in XML
				
				      

			If you allow me a side question, I'ld be interested
to learn about why
			people should feel the need of exporting password
lists. Can you give me
			a hint? Furthermore, how do you intend to deal with
encrypted matter in
			XML? Are you storing passwords in cleartext or in
some kind of encrypted
			form in XML?
			
			    

		For my purposes, I'm interested in getting information out
of
		passwordsafe files and into a web-served backend (untrusted)
database.
		In this scenario the encryption/decryption will be carried
out on the
		(trusted) client-end in Java. XML is not a requirement, just
a nicety;
		I'm flexing my somewhat dormant programming muscles and
learning to use
		the libxml2 libraries! ;-)
		
		Wren
		
		  





-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click