[Cryptography-dev] Noob question about some data that has been leaked in encrypted form

Lucas Vazquez lucas5zvazquez at gmail.com
Tue Apr 21 08:52:18 EDT 2020


Hello to all devs, I'm using Fernet with Django to store some private
external data in a Regulators Website.
Recently, that data has been exposed in encrypted form by a mistake.
Each user saw some of their data in encrypted form in the configuration
view, and if it modified them, the filtered contents were modified
accordingly.
Could any smart user have discovered, through various changes to the
fields, the secret key that I use with fernet?

Have a good day
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/cryptography-dev/attachments/20200421/ccb92c97/attachment.html>


More information about the Cryptography-dev mailing list