3 ms·
Not an encryption expert, and would likely use it myself. My guess is it's about as secure as putting an encrypted file on the internet. Except this has almost
by nico_h 9y ago
Not an encryption expert, and would likely use it myself.
My guess is it's about as secure as putting an encrypted file on the internet. Except this has almost all the information you need to know how it was encrypted. Plus it has a useful guess-the-password form. There is no attempt-limiting or rate-limiting if you can download the file.
- codazoda 9y agoI'm no expert but I think if they use a cryptographic function that requires a lot of CPU cycles, such as bcrypt, it will still be hard to brute force as long as you use a secure password. It looks, however, like they might have used something like sha256. I don't think that requires a lot of CPU and so it's much easier to brute forced. It's probably good enough for stuff like an informational product that you want to put behind a password but not good enough for storing your credit card details.