3 ms·
They use SRP for authentication, and yes, your private key is encrypted with a key derived from your passphrase. https://protonmail.com/blog/encrypted_email_au
by tonyztan 9y ago
They use SRP for authentication, and yes, your private key is encrypted with a key derived from your passphrase.
https://protonmail.com/blog/encrypted_email_authentication/ https://protonmail.com/blog/encrypted_email_authentication/
- StavrosK 9y agoI see, thanks. So they use SRP with the password to authenticate, and then KDF(password) to decrypt your email (as they say). I would hope (and they probably do) use the latter to decrypt an encryption key for your email, rather than using your KDFed password directly, as that would mean they'd need to reencrypt all your mail if you changed your password.