From 854fd63ea907a870f1916d266e18aaba97820e32 Mon Sep 17 00:00:00 2001 From: Bjoern Schiessle Date: Fri, 7 Aug 2015 15:51:43 +0200 Subject: use uid as additional information for salt --- apps/encryption/controller/settingscontroller.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'apps/encryption/controller') diff --git a/apps/encryption/controller/settingscontroller.php b/apps/encryption/controller/settingscontroller.php index dbd960bb784..2a668f7cd4a 100644 --- a/apps/encryption/controller/settingscontroller.php +++ b/apps/encryption/controller/settingscontroller.php @@ -100,10 +100,10 @@ class SettingsController extends Controller { if ($passwordCorrect !== false) { $encryptedKey = $this->keyManager->getPrivateKey($uid); - $decryptedKey = $this->crypt->decryptPrivateKey($encryptedKey, $oldPassword); + $decryptedKey = $this->crypt->decryptPrivateKey($encryptedKey, $oldPassword, $uid); if ($decryptedKey) { - $encryptedKey = $this->crypt->encryptPrivateKey($decryptedKey, $newPassword); + $encryptedKey = $this->crypt->encryptPrivateKey($decryptedKey, $newPassword, $uid); $header = $this->crypt->generateHeader(); if ($encryptedKey) { $this->keyManager->setPrivateKey($uid, $header . $encryptedKey); -- cgit v1.2.3