3 ms·
The server can still bruteforce it though right?
by throwaway415415 8y ago
The server can still bruteforce it though right?
- lotharrr 8y ago(author of magic-wormhole here) Nope, the server gets no more power than a random network attacker. The codes are single-use, enforced by PAKE, so an attacker (or the server) gets at most one chance to guess the code for any single execution of the program.