How does evernote know the given decryption password is correct?

[kadaj 5]

How does evernote know decryption password is not correct? Is it saving the hash of the password while encryption?

Why am I not able to decrypt the cipher text obtained from exporting the note using an online tool? It give gibberish. Eg:

<en-crypt cipher="AES" length="128">RU5DMEb2+eYtU5Eq2CuLb01T7rWz4Xe+phn/M8uxJH/t8hWH5/9MIAvBRRYu86ci8k/tMJ0vUxDlQWOiXNh5zyYdBBv69QijTMA6zPjL9opm/ZhNu4YysZftyuMTYjPJyIMGzGlvFM9BbA+HeQtIcd0i3uVwo7ZLDJsYr5CVM9FGDhAd77tEBDR7A/aegkQ+mb8eGNhq4Q977hOhlyMi+NQ1dhA5MiQ44c7v2xhxY69BBZ3u</en-crypt>

The text is abc and the password is 123. I tried decrypting the content part using http://aesencryption.net/ with 128 bit but doesn't work. Any idea?

Thanks.

[EdH 1,670]

29 minutes ago, kadaj said:

The text is abc and the password is 123. I tried decrypting the content part using http://aesencryption.net/ with 128 bit but doesn't work. Any idea?

Good luck with that.

https://evernote.com/security/

When you encrypt text, we prompt you for a passphrase. We take your passphrase along with a unique salt and use PBKDF2 with 50,000 rounds of SHA-256 to derive a 128-bit AES key. We use this key, along with an initialization vector, to encrypt your data in CBC (Cipher Block Chaining) mode.