This isn't true anymore. Newer versions store a SHA-256 hash of the header insid...

debfx on June 16, 2015 | parent | context | favorite | on: KeePass – questionable security

This isn't true anymore.

Newer versions store a SHA-256 hash of the header inside the encrypted XML.

At least KeePass >= 2.20 and KeePassX 2.0 >= alpha3 support this. I haven't checked other implementations.