uwedeportivo / kindi Goto Github PK

Steps to reproduce:

1. Encrypt a file.
2. Open the encrypted file in hex editor and modify contents after the header.
3. Decrypt the file.

Result:

Plain-text modified, different from the one that has been encrypted.

Expected:

Error.

Example:

http://i.imgur.com/eYI1N.png

:-)

Suggestion:

Please add authentication. It can be HMAC of the file contents with some secret key, derived from encryption key, (for example, first N bytes of symmetric keystream). For example, check out the file format of scrypt utility by Colin Percival (http://www.tarsnap.com/scrypt.html ): http://www.dchest.org/crypto/scrypt.html (although, it deals with passwords).

Good luck!