4 ms·

I think you should elaborate on the specific threat model you're describing. Are you assuming a dumped database? Or are you talking about a brute force against

• sp332 8y ago
  That is exactly the question a user should ask themselves. I can't answer it for anyone else. But for your two cases, the key is more secure because there is no relatively short password that can be guessed. An attacker has to brute force the cryptographic key, which should be infeasible. Passwords are easier to crack online or offline, unless you've picked a password with 112 bits of entropy.
  • emlun 8y ago
    >brute force the cryptographic key, which should be infeasible. Not only infeasible - physically impossible, in fact (barring quantum computers). Just 128 bits of entropy would take 1e16 (10 quadrillion) years to brute force at 1e15 attempts per second. :)