Java module to handle Password Safe format 3 encrypted databases
Current status: stable RELEASE 2-10-1
Release date: 28 Feb. 2024
Compatibility Format: PWS 3.13 (Password Safe)
Platform: Java 1.8
Dependencies: packages 1 and 2 of UtilClasses 0-12-0 (same author)
Distribution License: BSD-like (2-clause), Lesser GPL 3.0
Contributions: strong encryption software by Cryptix Foundation; others
Addresses: file and data stream digestion, FTP optional
Available Supplements:
-- FTP IO-adapter
Includes package: FTP4J (Sauron Software 2012) distr. under LGPL 2
Release 2-10-0
- removed capabilities to digest old Password-Safe formats 1 and 2
- enhanced entropy for cryptographic random generation
- length of the Twofish encryption key can assume the values 256, 192, 128 or 64 (was only 256 before)
- Adapted the package for usage of the UtilClasses project
DEPENDENCIES: packages 1 and 2 of Util-Classes 0-12-0
Release 2-9-0
- added new interface elements (functions) in PwsCipher for encrypting and decrypting of data blocks so that these functions don't return a new byte array
- optimised algorithms for reading and writing databases with less demand on heap space
- optimised class for cipher mode CFB
- cipher mode CFB can now crypt user data of any length
- using cipher mode CFB for internal veiling of user data
- new platform: Java 1.8 (was 1.6 before)
Release 2-8-1
- maintenance release; optimisations in data complexity
- PwsRawField improved behaviour of cloning
- PwsRawField now allows data direct reference to external block
New Features with 2-7-0
Release 2-7-0
- major release; interface additions and behaviour changes
New Features with 2-7-0
- introduction of a multi-field (3) sort facility in OrderedRecordList including sort directions ASCENDING and DESCENDING. Enum DefaultRecordWrapper.SortField describes available datafields as sort options.
- PwsRecordList.merge has a new return type of 3 record lists which make traceable what has happened during merge.
- the logical database name is made more easily available through new method PwsFile.getDatabaseName().
- introduction of a time-stamp value for PwsFile representing a real or assumed time marker of the external state (used for detecting file save conflicts).
- minor corrections; PwsRecordList made Iterable
New Features with 2-6-0
- for files of version 3: fixed conversion from user input character string to primary file access key material to UTF-8 encoding. Password Safe V3 format definition was unspecific to this point and hitherto practice relied on the JVM default which basically is locale and OS specific. In order to standardise file access among varying locations of use, this step was required. In consequence of this modification, failing file access may occur if characters outside of ASCII have been used as key material. In this case the file should be opened in a previous version of this software and the access key modified to a key which contains only ASCII characters. This modified file should be able to open under new conditions (2-6 and later). There is no other solution.
- Extra Fields in PwsRecord (record data field types outside of the Password Safe data canon) are now stored encrypted in memory; was cleartext before.
- the standard (internal) cipher used and provided by PWSLIB package is now Twofish ECB (was Blowfish before).
- performance of crypting and file reading routines has been improved.
Bug Fixes with 2-5-1
- corrected a bug in CryptoRandom that reduced the value range of nextInt(int) and appeared to prefer negative values in nextLong()
- corrected a bug in OrderedRecordList which falsely kept some updated old record states (doubles) after reindex when record title has changed
New Features with 2-5-0
- all parts were overhauled for standardised coding style and improved Javadoc descriptions
- PwsRecordList was particularly overhauled for increased efficiency and performance
- added methods and constructors in PwsRecordList, PwsFile and ContextFile to improve usability
- OrderedRecordList restructured and now features a record filtering tool
- FilterRecordList removed (functionality replaced by OrderedRecordList)
- FTP application adapter rewritten for use of external library ftp4j-1.7.2.jar by Sauron Software, Italy. FTP functionality is offered under LGPL license as supplement
- introduced JUnit testing for PwsRecordList and PwsFile
- Log now has an opening for definiing expressions to suppress messages