jslib
2key-ratchet
| jslib | 2key-ratchet | |
|---|---|---|
| 16 | 1 | |
| 127 | 109 | |
| - | 5.5% | |
| 9.4 | 0.0 | |
| almost 2 years ago | over 1 year ago | |
| TypeScript | TypeScript | |
| GNU General Public License v3.0 only | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
jslib
-
Bitwarden PINs can be brute-forced
Someone should tell them!
https://github.com/bitwarden/jslib/issues/52
-
How to estimate strength of strong not 100% randomly generated passhphrases?
To that extent, they're not going to bother trying to brute force the original password with aaaaaaa, aaaaaab, aaaaaac, etc. they'll start by going through the very publicly known word list and try abacus, abdomen, abdominal, etc.
-
What am I doing wrong?
FYI, according to the implementation notes in the .1pux importer pull request , the 1Password categories should be mapped to Bitwarden categories as follows:
-
Lost my master password
In 2021, there was a PR (bitwarden/jslib#404) that changed it from 1 to 2 for local authentication. Server authentication still uses 1 iteration.
- SHA256 is a terrible choice for a PBKDF in 2019
-
Are passphrases random, or is there some kind of semantic algorithm to pick related words and try to make easier to remember together? Just got this gem 👀
As a point of interest, there are 7,776 unique words in the word list. As such, each word provides log2(7776) ~= 12.92 bits security. So the 4 word phrase Bitwarden generates by default only provides ~51 bits security (your 3 word phrase about 38 bits).
- Where can I find the source code for Bitwardens password generator program?
-
Bitwarden code on Github question
The code you're interested in is here: https://github.com/bitwarden/jslib
-
Bitwarden CSV Import
Fixes and improvements to MykiCsvImporter by djsmith85 · Pull Request #707 · bitwarden/jslib (github.com)
- Generating passphrase in language other than English
2key-ratchet
-
How to do E2EE in the Browser correctly if even possible?
I found a Library (2key-ratchet) which claims to have implemented the "Double Ratchet" protocol and X3DH in Typescript. Due to the Differences stated in the Repo: Is this a good Replacement for my Testing "Stack"?
What are some alternatives?
ElectronMail - Unofficial ProtonMail Desktop App
end-to-end - End-To-End is a crypto library to encrypt, decrypt, digital sign, and verify signed messages (implementing OpenPGP)
angular-electron - Ultra-fast bootstrapping with Angular and Electron :speedboat:
exifcleaner - Cross-platform desktop GUI app to clean image metadata
bitwarden - Bitwarden client applications (web, browser extension, desktop, and cli) [Moved to: https://github.com/bitwarden/clients]
ios - EteSync - Secure, end-to-end encrypted, and privacy respecting sync for your contacts, calendars and tasks.
generator-ngx-rocket - :rocket: Extensible Angular 14+ enterprise-grade project generator
Tutanota makes encryption easy - Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
PKI.js - PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.