Remplacement for zsafe on wheezy

[Mérof 42]

Hi all,

I used zsafe for storing all my password since a lot of time, it is really useful for my usage.
It is no present on wheezy, because it is not more maintened I think
All my password are generated by pwgen and changed sometime, so I can't remember all
Her is the package for squeeze :
http://packages.debian.org/squeeze/zsafe

I need to:

Store different kind of login/password (imap, ssh, jabber, mysql, webservices, etc...)
Store some field, for example with mysql, I need username, password, databasename, servername and a comment
Store all these data on a safe place.
If is possible, have different category (I dont need to show all my password if I need only a mysql for reinstalling a php script).

zsafe do all of that, somebody know something who work like it?

Thanks you all :)

[Kushal Kumaran]

Try keepassx: http://packages.debian.org/wheezy/keepassx

On that package page, there is also a list of "Similar packages". You
might want to take a look through them as well.

--
regards,
kushal


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/51ae0907.c786...@mx.google.com

[Slavko]

Dňa 04.06.2013 17:34 Kushal Kumaran wrote / napísal(a):
> Try keepassx: http://packages.debian.org/wheezy/keepassx
>
I can recommend it too - there are compatible programs for use the same
database on the windows and android too - very useful! ;-)

--
Slavko
http://slavino.sk

[Mérof 42]

Thanks you both, I'm going to test it.
It seem to be better than zsafe, with more options.

I just dislike qt library, but is a different story

A question about keepassx, I saw it use AES 256bits to store password, is my password safe if somebody steal my laptop per example?

Off course I plan to use a sufficient strong master password.

I'm not really familiar with encryption, and I don't know witch encryption provide sufficient security.

 

2013/6/4 Slavko <li...@slavino.sk>

[Kushal Kumaran]

Mérof 42 <mer...@gmail.com> writes:

> Thanks you both, I'm going to test it.
> It seem to be better than zsafe, with more options.
> I just dislike qt library, but is a different story
>
> A question about keepassx, I saw it use AES 256bits to store password, is
> my password safe if somebody steal my laptop per example?
> Off course I plan to use a sufficient strong master password.
> I'm not really familiar with encryption, and I don't know witch encryption
> provide sufficient security.
>

According to the zsafe manpage[1], it uses the RC2 algorithm. Using the
sophisticated method of looking at their wikipedia pages[2, 3], it would
seem that AES has received considerably more analysis by experts. So,
it would seem that keepassx is safer than zsafe, as long as the
encryption algorithm is your only criteria.

I would count the apparent lack of upstream (broken upstream link in the
manpage) to be a negative for zsafe as well.

[1] http://manpages.debian.net/cgi-bin/man.cgi?query=zsafe

[2] https://en.wikipedia.org/wiki/RC2

[3] https://en.wikipedia.org/wiki/Advanced_Encryption_Standard

--
regards,
kushal


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/51af5c96.44e444...@mx.google.com

[Tyler D]

On Wed, Jun 5, 2013 at 4:16 AM, Mérof 42 <mer...@gmail.com> wrote:
> Thanks you both, I'm going to test it.
> It seem to be better than zsafe, with more options.
> I just dislike qt library, but is a different story
>
> A question about keepassx, I saw it use AES 256bits to store password, is my
> password safe if somebody steal my laptop per example?
> Off course I plan to use a sufficient strong master password.
> I'm not really familiar with encryption, and I don't know witch encryption
> provide sufficient security.

Another recommendation for KeePassX from me as well. It works on
Linux, Mac, and Windows. That was one of the more important selling
points for me.

As far as the safety of a KeePassX database goes, I think you are
fine. I too am not a mathematical computer wizard of science theory,
so I suggest this post:
http://serverfault.com/questions/51895/are-128-and-256bit-aes-encryption-considered-weak

I also wanted to point out that you can set up a two-factor
authentication scheme. Meaning, in addition to requiring that a
password (something you know) be supplied, you can also require that a
key file (something you have) be specified. That doesn't really have
to do with security (your "sufficient security") but rather
authentication. Since there can be an additional authentication
factor, the likelihood of someone being able to brute force their way
in to your password database are made lower.

--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Archive: http://lists.debian.org/CAH3rtgACXewxoHy_gTFU9Hxh...@mail.gmail.com

[Mérof 42]

Sorry for this late response.

I finally used fpm2, because I use mate desktop and fpm2 is on gtk so it give me a better integration.

fpm2 have less option than Keepassx, but have they I need.

I use only Debian, so I don't care if it doesn't work on Windows or Mac :)

fpm2 use also aes encryption, I think security is the same with the same encryption.

Thanks you all

2013/6/7 Tyler D <tdo...@gmail.com>

[Mérof 42]

Sorry for this late response.

I finally used fpm2, because I use mate desktop and fpm2 is on gtk so it give me a better integration.

fpm2 have less option than Keepassx, but have they I need.

I use only Debian, so I don't care if it doesn't work on Windows or Mac :)

fpm2 use also aes encryption, I think security is the same with the same encryption.

Thanks you all

2013/6/7 Tyler D <tdo...@gmail.com>