TeamAmaze/AmazeFileManager

Password update doesn't work for encrypted file

Open

#1,625 opened on Apr 26, 2019

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Java (4,883 stars) (1,529 forks)batch import
Area-CryptographyIssue-Bughelp wanted

Description

  1. Encrypt any file with password1
  2. Encrypt the same file with password2
  3. Decrypt the file with password2

Expected result: file is decrypted with password Actual result: "Wrong password!" But if I use password1 it still works instead the fact that I updated the password to password2.

Amaze 3.3.2

Contributor guide

Tech stack
javaandroid
Domain
mobilesecurity
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
needs investigation
Prerequisites
JavaAndroid developmentBasic cryptography
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
25
Research direction
The issue reports that updating the password on an encrypted file does not replace the old password; the old password still works. Investigate the encryption logic in the repository, likely in classes like CryptoUtils.java or similar. Check how password updates are handled during file re encryption. Look for any linked code that manages encryption metadata or key derivation. The bug may be that the new password is stored but the old key remains valid, or the update process does not re encrypt the file with the new password.
Password update doesn't work for encrypted file · TeamAmaze/AmazeFileManager#1625 | Good First Issue