Description
CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks.
References
- 15455 vdb-entry
- 21244 vdb-entry
- 190 third-party-advisory
- 20051116 Schneier's PasswordSafe password validation flaw mailing-list