3 ms·
Where are you suggesting to keep the "secret" (to be XORed with)? It must be stored somewhere in the firmware or on the disk, right? Then I'm afraid it's not a
by jakobdabo 11y ago
Where are you suggesting to keep the "secret" (to be XORed with)? It must be stored somewhere in the firmware or on the disk, right? Then I'm afraid it's not a secret, it's just a second salt (which KDF functions already have one) and can be easily read. I just don't see the point.
- deepnet 11y agoThe point is if you no longer have the laptop and hadn't previously extracted the "second salt", thus out of luck And you are probably unaware of why your password doesn't work. Were you aware of this issue before GP posted ? I wasn't.
- sneak 11y agoThere would be lists of per-model salts shared online in days.
- esrauch 11y agoIt could be a per-device salt.
- NeutronBoy 11y agoAnd it could be stored in a tamper-proof chip on the device itself...