3 ms·
They are not the first to invent an "RSA-keypair-by-password" scheme and certainly not the last. The main issue with these is the fact that an estimated entropy
by huhtenberg 11y ago
They are not the first to invent an "RSA-keypair-by-password" scheme and certainly not the last. The main issue with these is the fact that an estimated entropy of English language is 1.2 bit per symbol [1], so even if you are using pass-phrases, you are still generating an RSA keypair with a PRNG with only few tens of bytes in randomness in it.
[1] I think this was in one of Shannon's papers, but not sure. It should be very easy to find though. Basically once you start digging around a topic of using passwords as PRNG seeds all relevant research surfaces very quickly.