Unable to paste into pinentry window
Reported by Nigel Metheringham | January 26th, 2011 @ 09:06 PM | in 2.0.18 (closed)
I use a password management app (1Password in this case) to generate and keep all my passwords. The last thing I want to do is attempt (and fail) to manually type a long complex password. However paste appears to be disabled for the pinentry window.
Comments and changes to this ticket
-
-
Alex (via GPGTools) January 26th, 2011 @ 09:38 PM
- State changed from “new” to “open”
- Milestone cleared.
- Assigned user set to “Benjamin Donnachie”
- Importance changed from “High” to “”
-
Benjamin Donnachie January 26th, 2011 @ 09:47 PM
"Feature" of the operating system.
Try show text and then paste. Otherwise ticket needs to be allocated to Roman.
Sent from my iPhone
-
Mento January 26th, 2011 @ 10:09 PM
- State changed from “open” to “invalid”
-
-
steve January 26th, 2011 @ 11:56 PM
Nigel, it's a feature not a bug ;)
1Password is not made to work with pinentry-mac and the user is not supposed to copy & paste his password. Then it would be in the clipboard insecure to any attacks.
You can still use your mac keychain to store the Passphrase, afaik. But since this is security related software it is the highest priority to ensure this is and stays unbreakable.
-
Benjamin Donnachie January 30th, 2011 @ 07:31 PM
- State changed from “invalid” to “open”
- Milestone cleared.
- Importance changed from “” to “”
Should be reasonable to allow a user to paste their password into the pinentry program.
Linked with #34 I will look into overriding an existing class to provide this function.
-
Alex (via GPGTools) May 11th, 2011 @ 08:36 AM
- Milestone cleared.
- Importance changed from “” to “High”
-
masch July 29th, 2011 @ 11:48 PM
- Importance changed from “High” to “”
I noticed this problem too. I too want to paste my password from a password app (KeepassX) into the pinentry GUI app. And this works partly - if you right click in the password field, then you can choose to paste it and it works. But Apple+V does not paste anything.
I checked out the source code and the problem is that there is no "Main Menu" for the program associated in the Xib file. I added this and recompiled and now copy and paste works just fine. It doesn't change anything visible because the app acts as UI Agent and the MenuBar isn't visible either way.
As a side node, it is of course not as secure as typing it in, but most password programs - I know that Keepass does this - overwrite the memory region of the password with garbage and then empty it, to prevent other programs from snooping in the clipboard - of course this just narrows down the time frame to a few seconds in that snooping is possible - but better than nothing.
Regards Marco
-
Alex (via GPGTools) July 30th, 2011 @ 10:47 AM
- Assigned user changed from “Benjamin Donnachie” to “Mento”
- Milestone cleared.
- Importance changed from “” to “”
Nice. Thank you.
-
-
-
Mento July 30th, 2011 @ 11:55 PM
- State changed from “open” to “resolved”
-
Alex (via GPGTools) December 28th, 2011 @ 01:27 PM
- Milestone set to “2.0.18”
- Importance changed from “” to “”
-
Alex (via GPGTools) December 30th, 2011 @ 09:11 AM
- State changed from “resolved” to “released”
Fixed in 2.0.18: see https://github.com/GPGTools/MacGPG2/downloads
-
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
People watching this ticket
masch
steve
Referenced by
-
29
Documentation for MacGPG2
welcome, also see http://gpgtools.lighthouseapp.com/proje...
-
34
Accents in passphrases through GUI only work when "Show typing" is enabled
I will look into overriding an existing class to provide ...