mirrors/termscp
1
0
Fork 0
mirror of https://github.com/veeso/termscp.git synced 2026-07-26 17:41:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: replace magic-crypt with aes-gcm for bookmark encryption

Browse Source 
magic-crypt has known vulnerabilities. Replace it with aes-gcm for new
encryption (authenticated, with random nonces) while keeping a legacy
AES-128-CBC decryption path to transparently handle existing bookmarks.
This commit is contained in:
Christian Visintin
2026-02-28 15:26:42 +01:00
parent 0d24662b3d
commit 4d65e48b3c
4 changed files with 210 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Cargo.toml
View File

@@ -32,8 +32,12 @@ name = "termscp"
path = "src/main.rs"
[dependencies]
aes = "0.8"
aes-gcm = "0.10"
argh = "^0.1"
base64 = "0.22"
bitflags = "^2"
cbc = { version = "0.1", features = ["alloc"] }
bytesize = "^2"
chrono = "^0.4"
content_inspector = "^0.2"
@@ -49,7 +53,7 @@ keyring = { version = "^3", features = [
] }
lazy-regex = "^3"
log = "^0.4"
magic-crypt = "4"
md-5 = "0.10"
notify = "8"
notify-rust = { version = "^4", default-features = false, features = ["d"] }
nucleo = "0.5"