CalvinBackup/HackBrowserData
1
0
Fork 0
mirror of https://github.com/moonD4rk/HackBrowserData.git synced 2026-07-06 21:37:47 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: per-tier master-key retrievers for mixed-cipher profiles (#579)

Browse Source 
* fix: per-tier master-key retrievers for mixed-cipher profiles
This commit is contained in:
Roger
2026-04-20 17:33:38 +08:00
committed by GitHub
parent e50c623db0
commit 7b9a973c9c
29 changed files with 699 additions and 227 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crypto/version.go
+9 -1
View File
@@ -14,6 +14,12 @@ const (
// CipherV20 is Chrome 127+ App-Bound Encryption.
CipherV20 CipherVersion = "v20"
// CipherV12 is Chromium's SecretPortalKeyProvider (Flatpak / xdg-desktop-portal) tier —
// HKDF-SHA256 + AES-256-GCM with a secret retrieved via org.freedesktop.portal.Desktop.
// Recognized by DetectVersion so decryptValue can emit a known-gap error rather than a
// generic "unsupported cipher version" message; not yet implemented.
CipherV12 CipherVersion = "v12"
// CipherDPAPI is pre-Chrome 80 raw DPAPI encryption (no version prefix).
CipherDPAPI CipherVersion = "dpapi"
@@ -32,6 +38,8 @@ func DetectVersion(ciphertext []byte) CipherVersion {
return CipherV10
case "v11":
return CipherV11
case "v12":
return CipherV12
case "v20":
return CipherV20
default:
@@ -43,7 +51,7 @@ func DetectVersion(ciphertext []byte) CipherVersion {
// Returns the ciphertext unchanged if no known prefix is found.
func stripPrefix(ciphertext []byte) []byte {
ver := DetectVersion(ciphertext)
if ver == CipherV10 || ver == CipherV11 || ver == CipherV20 {
if ver == CipherV10 || ver == CipherV11 || ver == CipherV12 || ver == CipherV20 {
return ciphertext[versionPrefixLen:]
}
return ciphertext