4 ms·
Your Steam account ID is trivial to figure out and once you know that, you can derive the decryption key, so what's the point? Though I guess TPM could be used
by Asooka 8y ago
Your Steam account ID is trivial to figure out and once you know that, you can derive the decryption key, so what's the point? Though I guess TPM could be used here..
- k_sze 8y agoI was assuming that your steam account ID isn’t persisted in cleartext on disk either. Failing that, we could have a key that’s just stored on the Steam cloud and requires login to retrieve.
- guitarbill 8y agokey wrapping works fine. massively simplified: generate random secret, encrypt data with random secret, encrypt random secret with password, store that. so when your password is updated, you only have to update the encrypted random secret, not all the files.
- k_sze 8y agoWhat happens if you have your Steam profile on multiple machines and you need to change/reset the password?