3 ms·
> storing your password hash Not really. The goal is to safely store an extra random value that's mixed with the password hash to derive the master key for the
by floatboth 7y ago
> storing your password hash
Not really. The goal is to safely store an extra random value that's mixed with the password hash to derive the master key for the account, because they don't want to fully trust the password hash, because some passwords are too weak.
Could've just made password requirements stronger, but that doesn't provide an excuse to play with SGX I guess :)
- IshKebab 7y agoI was simplifying.