3 ms·
> b.lock uses your Nebulas private key (in other words, the master key) to encrypt your passwords and secret notes, using the AES-256 encryption algorithm. Wit
by loup-vaillant 8y ago
> b.lock uses your Nebulas private key (in other words, the master key) to encrypt your passwords and secret notes, using the AES-256 encryption algorithm.
Without digging any further, this is one of the scariest parts. Maybe they say AES because their marketing is aimed at ignorant people, for which a bare "AES" still sounds good. But if they are thinking AES, then I'm afraid how insecure their chosen mode of operation (and implementation thereof) might be.
Not too afraid though. The whole premise is bogus, there are less wasteful ways to manage passwords.
- GordonS 8y agoI would hope they are using some form of authenticated encryption, and talk about AES to keep it simple... but given the pointlessness of using a blockahain for this, maybe not. Also, they explicitly say they are using the master key - they should really be using a DEK.