4 ms·
The advantage of using a long key (generated randomly) is that bruteforcing of the material protected with the key is impossible, which does matter in some scen
by acqq 7y ago
The advantage of using a long key (generated randomly) is that bruteforcing of the material protected with the key is impossible, which does matter in some scenarios: specifically, if one trusts the container format, knows that the container will be accessible to the potential attackers who can try to brute force it, but also knows that the rest (the long key used) won’t be accessible to the said attackers. Which can be a reasonable scenario. Whoever uses a password manager should use reasonably long keys generated randomly.
The real problem, like always, is key management. And knowing what is “overkill” for a given scenario, i.e. where reasonability ends. 8 MB is really something that should have some additional reasons than just protection from brute forcing the key.