Where are my passwords

[Romain]

Hi Enpass Team,

as you claim everywhere that Enpass is based on SQLCipher, an opensource technology, I decided to look by myself (not that I don't trust you, but i'm curious ;)).

So, I installed sqlcipher and opened the database. It was easy to find the right parameters to decrypt the DB:

PRAGMA cipher_default_kdf_iter = 24000;
PRAGMA kdf_iter = 24000;
PRAGMA key = '<PASSPHRASE>';

But now, I can't find where are the passwords. I would have thought they would be in the Cards table in the Data field, but it's obviously not, as (almost) all my Data fields have the same value. The passwords does not seem to be in the other tables. So, where are they?

I surely missed something. Could you enlighten me?

Thx!

[Ak]

Hi Romain,

I found a python script on github that lists all your items from Enpass.
https://github.com/steffen9000/enpass-decryptor/blob/master/Enpassant.py

Clearly, Enpass is doing additional encryption of data column for unknown reasons.

Edited December 2, 2016 by Ak

[Romain]

Very cool!

Thx for the link  

[My1]

but at least now we have the code for the entire enpass database format, which is great.