diff options
author | Kali Kaneko (leap communications) <kali@leap.se> | 2016-10-21 17:06:52 -0400 |
---|---|---|
committer | Kali Kaneko (leap communications) <kali@leap.se> | 2016-10-21 17:17:41 -0400 |
commit | 801f9318be9a0daf93205ac58e18d48efa358ebf (patch) | |
tree | 5b542346da55f833cd27b4502329a5c4c637fce1 /tox.ini | |
parent | ce504db409ca2db4df5be807d636120d210061ad (diff) |
[bug] workaround around scrypt.encrypt() failure in windows
scrypt raises a "unable to get salt from /dev/urandom" error when using
encrypt method in windows.
this is a quick workaround for obfuscating the uuid map, but it needs to
be carefully reviewed as per the security implications (i'm using the
hostname to salt the key hashing).
doing this, I contemplated the possibility that the scrypt encryption we
were using could be flawed, since the payloads can be easily guessed.
so, take this with a pinch of salt (haha), and let's review it for the
future. as always, this was in a rush trying to bring windows support.
Diffstat (limited to 'tox.ini')
0 files changed, 0 insertions, 0 deletions