11 ms·
Using "one-time-use combinations of three English words" is "fine" only if your definition of "fine" includes allowing someone with a minimal budget to find out
by AnaniasAnanas 8y ago
Using "one-time-use combinations of three English words" is "fine" only if your definition of "fine" includes allowing someone with a minimal budget to find out the password in less than a year. I am seriously wondering under what definition this could be considered better than OpenPGP.
XSalsa20 is indeed fine, but XChaCha20 is better in every way. The proof for XSalsa20 provided by Bernstein applies to XChaCha20 as well.
- sdevlin 8y ago> Using "one-time-use combinations of three English words" is "fine" only if your definition of "fine" includes allowing someone with a minimal budget to find out the password in less than a year. Magic Wormhole uses a PAKE to establish a secure channel from a low-entropy shared secret.
- AnaniasAnanas 8y agoI admit that I missed that part. My mistake, I apologise.
- tptacek 8y agoYou might also acknowledge your faulty critique of systems that use XSalsa20.