4 ms·
His underlying assumption is that given an ECDH public-key it is computationally infeasible to derive the private key / seed that went into creating it (via bru
by sgk284 11y ago
His underlying assumption is that given an ECDH public-key it is computationally infeasible to derive the private key / seed that went into creating it (via brute force). I suppose that's a fair assumption if your password has high enough entropy or is stretched sufficiently?
- tptacek 11y agoNo. The security of the password storage in this system has nothing to do with that of ECDH.
- sarciszewski 11y agoThis sounds worse than I imagined when I was reading through it earlier. Sorry if I muddied the waters earlier.