What type of encryption does the built-in password manager use?
I've been trying to know how secure is the built-in password manager in Firefox. On the web, some say it uses SHA-256, others SHA-1 with one iteration (wich would be awful!!!). If it's not secure enough, I will use another password manager.
被采纳的解决方案
When using a master password, passwords are encrypted using Triple DES Encryption in CBC mode. This is OK.
The problem is, master password is encrypted using SHA-1 with 1 iteration. This is quite weak (see bug 524403).
You still can use another pass manager.
定位到答案原位置 👍 1所有回复 (1)
选择的解决方案
When using a master password, passwords are encrypted using Triple DES Encryption in CBC mode. This is OK.
The problem is, master password is encrypted using SHA-1 with 1 iteration. This is quite weak (see bug 524403).
You still can use another pass manager.
由TyDraniu于修改