[debbugs-tracker] bug#20030: closed (plstore caches invalid passphrases)

[GNU bug Tracking System]

Your message dated Tue, 31 Mar 2015 10:17:49 +0900
with message-id <address@hidden>
and subject line Re: bug#20030: plstore caches invalid passphrases
has caused the debbugs.gnu.org bug report #20030,
regarding plstore caches invalid passphrases
to be marked as done.

(If you believe you have received this mail in error, please contact
address@hidden)


-- 
20030: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=20030
GNU Bug Tracking System
Contact address@hidden with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> plstore caches invalid passphrases
>
>
>
>
> Date: 
>
> Sat, 07 Mar 2015 15:11:36 +0100
>
>
>
>
> When using symmetric encryption and
> `plstore-cache-passphrase-for-symmetric-encryption' is non-nil,
> `plstore-passphrase-callback-function' stores the passphrase entered
> by the user in `plstore-passphrase-alist'.  This happens *before* the
> passphrase is used to decrypt, and if it turns out that it was wrong,
> then it is *not* removed from the cache.
>
> So if caching is turned on and the user enters the wrong passphrase,
> subsequent attempts to decrypt the same information will always fail,
> because the cached but invalid passphrase is used.  The user has to
> manually remove the invalid entry from `plstore-passphrase-alist' to
> get a second chance at entering the passphrase correctly.
>
>
>
> --- End Message ---
> --- Begin Message ---
>
>
>
> Subject: 
>
> Re: bug#20030: plstore caches invalid passphrases
>
>
>
>
> Date: 
>
> Tue, 31 Mar 2015 10:17:49 +0900
>
>
>
>
> User-agent: 
>
> Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux)
>
>
>
>
> Jonas Bernoulli <address@hidden> writes:
>
> > When using symmetric encryption and
> > `plstore-cache-passphrase-for-symmetric-encryption' is non-nil,
> > `plstore-passphrase-callback-function' stores the passphrase entered
> > by the user in `plstore-passphrase-alist'.  This happens *before* the
> > passphrase is used to decrypt, and if it turns out that it was wrong,
> > then it is *not* removed from the cache.
>
> Thanks, good catch.  I've installed a fix:
> http://git.savannah.gnu.org/cgit/emacs.git/commit/?id=2e4b0c98
>
>
> --- End Message ---