Jump to content

How does evernote know the given decryption password is correct?


Recommended Posts

How does evernote know decryption password is not correct? Is it saving the hash of the password while encryption?

Why am I not able to decrypt the cipher text obtained from exporting the note using an online tool? It give gibberish. Eg:

<en-crypt cipher="AES" length="128">RU5DMEb2+eYtU5Eq2CuLb01T7rWz4Xe+phn/M8uxJH/t8hWH5/9MIAvBRRYu86ci8k/tMJ0vUxDlQWOiXNh5zyYdBBv69QijTMA6zPjL9opm/ZhNu4YysZftyuMTYjPJyIMGzGlvFM9BbA+HeQtIcd0i3uVwo7ZLDJsYr5CVM9FGDhAd77tEBDR7A/aegkQ+mb8eGNhq4Q977hOhlyMi+NQ1dhA5MiQ44c7v2xhxY69BBZ3u</en-crypt>

The text is abc and the password is 123. I tried decrypting the content part using http://aesencryption.net/ with 128 bit but doesn't work. Any idea?

Thanks.

Link to comment
  • Level 5*
29 minutes ago, kadaj said:

The text is abc and the password is 123. I tried decrypting the content part using http://aesencryption.net/ with 128 bit but doesn't work. Any idea?

Good luck with that.

https://evernote.com/security/

When you encrypt text, we prompt you for a passphrase. We take your passphrase along with a unique salt and use PBKDF2 with 50,000 rounds of SHA-256 to derive a 128-bit AES key. We use this key, along with an initialization vector, to encrypt your data in CBC (Cipher Block Chaining) mode.

Link to comment

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...