10 ms·
> boot time by a human From the paper: > The server will restart periodically. All data kept in memory is lost at this point and the server must restart using
by leni536 11y ago
> boot time by a human
From the paper:
> The server will restart periodically. All data kept in
memory is lost at this point and the server must restart
using only the data on disk – which is attacker visible.
So I guess your solution is correct and trivial but the author's solution doesn't use data from outside, not even a user provided symmetric key.
- akerl_ 11y agoIt does use data provided from outside: you either need to provide enough valid passwords for it to recreate the secret, or leak data from the stored secrets, as described here: https://github.com/PolyPasswordHasher/PolyPasswordHasher#if-the-attacker-cant-check-individual-accounts-how-does-the-server-check-the-first-account-after-rebooting https://github.com/PolyPasswordHasher/PolyPasswordHasher#if-...
- leni536 11y agoThey leak data but their threat model involves that the attacker can get this leaked data too (they leak it to the hard disk?). >provide enough passwords Why don't they just store some dummy users' (with zero privileges) credentials directly on the hard drive? They simply can provide valid passwords from it after reboot and your attacker can have these passwords since they can't do anything with them. Maybe their leak strategy involves something like this?