Цитата:
Сообщение от tov.suhov писал пт, 11 июля 2008 21:41
PasswordSafe
|
Хорошая программка для хранения паролей. Но вот ответ её разработчика на вопрос по безопасности:
How secure is Password Safe?
The good news is that pwsafe is designed and implemented using the best currently known cryptographic practices, the source code is available for review, and we've changed the design and implementation more than once after receiving feedback from reviewers. Based on this, we believe that there's no known attack on a PasswordSafe database better than a brute-force attack on the passphrase. We've also taken measures to make such an attack as hard as possible. I recall reading about a brute-force cracking tool that could only generate ~900 attempts per second on PasswordSafe using a fairly strong PC, this being among the lower rates reported (compared to other security solutions). The encryption algorithm that PasswordSafe uses, TwoFish, is considered secure, and I'm unaware of any weaknesses that would allow an attacker to derive information about the encrypted data with less effort than a brute-force attack.
The less encouraging news is that a determined attacker can find other ways to find the passphrase, outside the scope of PasswordSafe. Attacks on the operating system, keyboard loggers, shoulder surfing, etc. can give an attacker the information she seeks without having to mount a brute-force attack on PasswordSafe. However, if you take normal precautions (never run untrusted executables, open untrusted attachments, apply security updates regularly, etc.), you should be reasonably safe.
Для ввода паролей в нужном месте она эмулирует нажатия кнопок на клавиатуре. Т.е. она поможет от шпионов просматривающих буфер обмена, но от кейлоггеров она не спасет. Подробное описание как работают клавиатурные шпионы
вот здесь.