Cryptkeeper Linux Encryption App Fails at Job, Has One Letter Skeleton Key - "P"

Cryptkeeper, famous Linux encryption app, is not as safe as one would like since a bug has been discovered, allowing universal decryption with a single letter: “p.”

The flawed version can be found in Debian 9 (Stretch), which is currently in testing, but not in Debian 8 (Jessie). According to the folks who discovered the bug, it seems that this is a result of Cryptkeeper invoking encfs and attempting to enter paranoia mode. It does this with a simulated “p” keypress but instead of doing that it sets the folder password to this particular letter.

Considering this is a tool that’s supposed to offer people protection by encrypting their files, it’s quite ironic that it could be opened universally with a single letter.

The problem seems to stem from the fact that encfs is executed with –S switch, reading the password from stdin without a particular prompt.  Following an encfs bug that prevented it from doing what it was supposed to do, a bugfix was released to correc...