3 ms·
Same strategy but Forgiva doesn't just use one key derivation algorithm (such as PBKDF2) but plus various hashing and encryption algorithms too. And at the sam
by marcusfrex 10y ago
Same strategy but Forgiva doesn't just use one key derivation algorithm (such as PBKDF2) but plus various hashing and encryption algorithms too.
And at the same time you may forget the options you used in Vault, it is not an option in Forgiva.
- icebraining 10y agoplus various hashing and encryption algorithms too. Is there any evidence that using multiple algorithms has any benefit over simply increasing the cost factor on one?
- RubyPinch 10y agoassuming combined correctly A( B( C(X) ) ), if A becomes broken in the future, its still B( C(X) ), as opposed to just revealing X straight away
- marcusfrex 10y agoYes, definitely you are right. And at the same time using various other methods "depending on the master key" makes it impossible for an accurate time and process estimation for brute-force attacks.