summaryrefslogtreecommitdiff
path: root/setup.cfg
diff options
context:
space:
mode:
authorKali Kaneko (leap communications) <kali@leap.se>2016-10-21 17:06:52 -0400
committerKali Kaneko (leap communications) <kali@leap.se>2016-10-21 17:17:41 -0400
commit801f9318be9a0daf93205ac58e18d48efa358ebf (patch)
tree5b542346da55f833cd27b4502329a5c4c637fce1 /setup.cfg
parentce504db409ca2db4df5be807d636120d210061ad (diff)
[bug] workaround around scrypt.encrypt() failure in windows
scrypt raises a "unable to get salt from /dev/urandom" error when using encrypt method in windows. this is a quick workaround for obfuscating the uuid map, but it needs to be carefully reviewed as per the security implications (i'm using the hostname to salt the key hashing). doing this, I contemplated the possibility that the scrypt encryption we were using could be flawed, since the payloads can be easily guessed. so, take this with a pinch of salt (haha), and let's review it for the future. as always, this was in a rush trying to bring windows support.
Diffstat (limited to 'setup.cfg')
0 files changed, 0 insertions, 0 deletions