From 6b23094cff77d7e485e0a2ae5698884f63c87ce7 Mon Sep 17 00:00:00 2001
From: Gustav Simonsson <gustav.simonsson@gmail.com>
Date: Thu, 2 Apr 2015 18:15:58 +0200
Subject: Improve key store passphrase crypto

* Change MAC-then-Encrypt to Encrypt-then-MAC
* Change AES256 to AES128
* Use first 16 bytes of KDF derived key for AES and
  remaining 16 for MAC
---
 crypto/key.go | 1 +
 1 file changed, 1 insertion(+)

(limited to 'crypto/key.go')

diff --git a/crypto/key.go b/crypto/key.go
index 0b84bfec1..654d9e83d 100644
--- a/crypto/key.go
+++ b/crypto/key.go
@@ -48,6 +48,7 @@ type plainKeyJSON struct {
 }
 
 type cipherJSON struct {
+	MAC        []byte
 	Salt       []byte
 	IV         []byte
 	CipherText []byte
-- 
cgit