thePR0M3TH3AN/seedPass
1
0
Fork 0
mirror of https://github.com/PR0M3TH3AN/SeedPass.git synced 2025-09-09 15:58:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove sensitive debug logging

Browse Source
This commit is contained in:
thePR0M3TH3AN
2025-08-03 11:02:36 -04:00
parent 42aa945b00
commit d75cc760d3
3 changed files with 29 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/utils/key_derivation.py
View File

@@ -94,11 +94,11 @@ def derive_key_from_password(
iterations=iterations,
dklen=32, # 256-bit key for Fernet
)
logger.debug(f"Derived key (hex): {key.hex()}")
logger.debug("Key derived from password using PBKDF2.")
# Encode the key in URL-safe base64
key_b64 = base64.urlsafe_b64encode(key)
logger.debug(f"Base64-encoded key: {key_b64.decode()}")
logger.debug("Derived key encoded in URL-safe base64.")
return key_b64
@@ -231,7 +231,7 @@ def derive_totp_secret(seed: str, index: int) -> str:
# Hash the first 32 bytes of entropy and encode the first 20 bytes
hashed = hashlib.sha256(entropy[:32]).digest()
secret = base64.b32encode(hashed[:20]).decode("utf-8")
logger.debug(f"Derived TOTP secret for index {index}: {secret}")
logger.debug(f"Derived TOTP secret for index {index}.")
return secret
except Exception as e:
logger.error(f"Failed to derive TOTP secret: {e}", exc_info=True)