{"action":"created","issue":{"url":"https://api.github.com/repos/keepassxreboot/keepassxc/issues/1565","repository_url":"https://api.github.com/repos/keepassxreboot/keepassxc","labels_url":"https://api.github.com/repos/keepassxreboot/keepassxc/issues/1565/labels{/name}","comments_url":"https://api.github.com/repos/keepassxreboot/keepassxc/issues/1565/comments","events_url":"https://api.github.com/repos/keepassxreboot/keepassxc/issues/1565/events","html_url":"https://github.com/keepassxreboot/keepassxc/issues/1565","id":301174265,"number":1565,"title":"2.3.0 corrupts HMAC secret with Yubikey","user":{"login":"VGrol","id":33915811,"avatar_url":"https://avatars2.githubusercontent.com/u/33915811?v=4","gravatar_id":"","url":"https://api.github.com/users/VGrol","html_url":"https://github.com/VGrol","followers_url":"https://api.github.com/users/VGrol/followers","following_url":"https://api.github.com/users/VGrol/following{/other_user}","gists_url":"https://api.github.com/users/VGrol/gists{/gist_id}","starred_url":"https://api.github.com/users/VGrol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/VGrol/subscriptions","organizations_url":"https://api.github.com/users/VGrol/orgs","repos_url":"https://api.github.com/users/VGrol/repos","events_url":"https://api.github.com/users/VGrol/events{/privacy}","received_events_url":"https://api.github.com/users/VGrol/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-02-28T20:37:58Z","updated_at":"2018-02-28T21:44:17Z","closed_at":null,"author_association":"NONE","body":"<!--- Provide a general summary of the issue in the title above -->\r\n\r\n## Expected Behavior\r\n<!--- If you're describing a bug, tell us what should happen -->\r\nDatabase should save and be able to reopen afterwards.\r\n<!--- If you're suggesting a change/improvement, tell us how it should work -->\r\n\r\n## Current Behavior\r\n<!--- If describing a bug, tell us what happens instead of the expected behavior -->\r\nSaving any existing database will cause it be impossible to open, provided a yubikey is configured with HMAC.\r\n\r\n<!--- If suggesting a change/improvement, explain the difference from the current behavior -->\r\n\r\n## Possible Solution\r\n<!--- Not obligatory, but suggest a fix/reason for the bug, -->\r\nCurrently testing work around, by removing HMAC and reapplying it after update.\r\n\r\nUpdate: Reapplying HMAC after the update and saving the database still corrupts the HMAC afterwards.\r\nFull removal is required.\r\n\r\nUpdate II: Opening the database and resaving it as AES-KDF (KBDX 4.0) or Argon2 instead of AES-KDF (KBDX 3.1) makes the database accessible even when saved.\r\n\r\n<!--- or ideas how to implement the addition or change -->\r\n\r\n## Steps to Reproduce (for bugs)\r\n<!--- Provide a link to a live example, or an unambiguous set of steps to -->\r\n<!--- reproduce this bug. Include code to reproduce, if relevant -->\r\n1. Open 2.20 KeepassXC database\r\n2. Save as X. Any automatic save will also work.\r\n3. Open the saved file.\r\n4. Should prompt HMAC error.\r\n\r\n## Context\r\n<!--- How has this issue affected you? What are you trying to accomplish? -->\r\n<!--- Providing context helps us come up with a solution that is most useful in the real world -->\r\n\r\n## Debug Info\r\nKeePassXC - Version 2.3.0\r\nRevision: 4c0ed74\r\n\r\nLibraries:\r\n- Qt 5.10.1\r\n- libgcrypt 1.8.2\r\n\r\nOperating system: Arch Linux\r\nCPU architecture: x86_64\r\nKernel: linux 4.15.2-1-vfio\r\n\r\nEnabled extensions:\r\n- Auto-Type\r\n- Browser Integration\r\n- Legacy Browser Integration (KeePassHTTP)\r\n- SSH Agent\r\n- YubiKey\r\n"},"comment":{"url":"https://api.github.com/repos/keepassxreboot/keepassxc/issues/comments/369393598","html_url":"https://github.com/keepassxreboot/keepassxc/issues/1565#issuecomment-369393598","issue_url":"https://api.github.com/repos/keepassxreboot/keepassxc/issues/1565","id":369393598,"user":{"login":"VGrol","id":33915811,"avatar_url":"https://avatars2.githubusercontent.com/u/33915811?v=4","gravatar_id":"","url":"https://api.github.com/users/VGrol","html_url":"https://github.com/VGrol","followers_url":"https://api.github.com/users/VGrol/followers","following_url":"https://api.github.com/users/VGrol/following{/other_user}","gists_url":"https://api.github.com/users/VGrol/gists{/gist_id}","starred_url":"https://api.github.com/users/VGrol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/VGrol/subscriptions","organizations_url":"https://api.github.com/users/VGrol/orgs","repos_url":"https://api.github.com/users/VGrol/repos","events_url":"https://api.github.com/users/VGrol/events{/privacy}","received_events_url":"https://api.github.com/users/VGrol/received_events","type":"User","site_admin":false},"created_at":"2018-02-28T21:44:17Z","updated_at":"2018-02-28T21:44:17Z","author_association":"NONE","body":"Yes, something must have triggered a conversion, somehow.\r\nI was using it perfectly fine in 2.2.4 earlier today.\r\n\r\nOpening it back in 2.2.4 now triggers\r\n`Unable to open the database.\r\nUnsupported KeePass database version.`"}}
{"actor":{"display_login":"VGrol"}}