mandos-client suppresses NULL characters from passphrases

Zen Fu zen at torproject.org
Mon Jun 29 13:44:19 CEST 2026


Hello, Mandos devs!

We're using passphrases randomly generated from /dev/random, and i
noticed that mandos-client suppresses NULL characters before handing the
passphrase to stdout. With --debug, the passphrase is printed correctly
in the output log, but for some reason when printing the passphrase to
stdout the NULL character is not printed, resulting in the wrong
passphrase.

I hope this is the correct place to report bugs.

Steps to reproduce:

- generate a passphrase with a NULL character (that's hex 00)
- use mandos-client to retrieve it
- see that the passphrase output suppresses the NULL character

Thanks!

-- 
Zen Fu


More information about the Mandos-Dev mailing list