2 ms·
nonces and hashing schemes are not very sensitive information though. The nonce does not make the HMAC more predictible in any way
by arianvanp 9y ago
nonces and hashing schemes are not very sensitive information though. The nonce does not make the HMAC more predictible in any way
- simias 9y agoA well encrypted password store isn't more sensitive though. That's the whole concept behind services like lastpass that host an encrypted blob in the "cloud". You could argue that it makes offline attacks easier because many encrypted storage formats have a way to check if the decryption was successful or not but you could remove this feature if that was a problem for you. And at any rate using a strong enough passphrase would make this attack impractical in the first place. And being notified when you used a wrong passphrase is pretty useful IMO.