An implementation of GOST R 34.12-2015 cipher for KeePass
Find a file
River b883f66b4b
Merge pull request #28 from 4-FLOSS-Free-Libre-Open-Source-Software/patch-1
[Enhancement] add Plugin 📦 Installation & Upgrade info to readme
2025-03-13 19:38:56 -06:00
GostPlugin Release 2.1 2015-10-02 11:28:16 +03:00
GostPluginSpeedTests Remove unsafe code 2015-09-30 14:25:40 +03:00
GostPluginTests Release 2.1 2015-10-02 11:28:16 +03:00
.gitattributes Initial Commit 2015-04-24 13:14:37 +03:00
.gitignore Initial Commit 2015-04-24 13:14:37 +03:00
GostPlugin.sln Update for 2.0.0 pre-release 2015-09-17 22:35:08 +03:00
LICENSE Initial commit 2015-04-24 13:01:22 +03:00
README.md add Plugin 📦 Installation & Upgrade info to readme 2021-11-30 14:27:48 +01:00

GostPlugin

Enables KeePass 2.x to encrypt databases using the GOST R 34.12-2015 algorithm.

GitHub license GitHub release Github Releases

Join the chat at https://gitter.im/yaruson/GostPlugin

Latest 2.0 release is incompatible with older 1.x versions and then should be used with caution

Features

  • Implementation of two ciphers defined within GOST R 34.12-2015: Kuznyechik and Magma (formely GOST 28147-89)
  • Both ciphers use 256-bit key; Kuznyechik handles 128-bit blocks and Magma – 64-bit blocks
  • This implementation uses Cipher Feedback (CFB) mode

Installation

  1. Download latest release
  2. Make sure that calculated checksum for GostPlugin.zip matches specified on release page
  3. Unzip and verify digital signature of GostPlugin.dll assembly
  4. Simply copy GostPlugin.dll to your KeePass directory and restart the application

If you're migrating from 1.x version, then change database encryption algorithm to AES before replacing plugin DLL.

Chocolatey 📦

Or you can use Chocolatey to install it in a more automated manner:

choco install keepass-plugin-gost

To upgrade KeePass Plugin Gost to the latest release version for enjoying the newest features, run the following command from the command line or from PowerShell:

choco upgrade keepass-plugin-gost

Usage

  1. Make sure that GOST R 34.12-2015 Plugin is listed in Tools → Plugins... dialog
  2. Switch encryption algorithm in your database's options dialog as described in Database Settings section of KeePass documentation

Acknowledgements

  • Reddit community and PolyPill for their commitment to quality of the code by conducting code review
  • Habrahabr community, sftp, milabs for their feedback and valuable support in performance optimization techniques
  • Michael Ospanov for reporting and resolving Addition Modulo 2^32 bug and performance improvement suggestions
  • Markku-Juhani O. Saarinen for Kuznyechik implementation