3 ms·
> from seeds partially known to the attacker That’s heavily misleading, like complaining encryption is performed using a key partially known to the attacker be
by minitech 7y ago
> from seeds partially known to the attacker
That’s heavily misleading, like complaining encryption is performed using a key partially known to the attacker because a nonce/IV is involved. The site name and username are there to derive different keys, not provide security.
- Laforet 7y agoExcept in this case there are no IV or nonce involved and every key derivation is perfectly replayable. Let's pause for a second and think what is the point of using password managers - I take it as a means to allow each account to have unique passwords that the leak of any of them won't lead to more account breaches. The method being shown here does nothing in this aspect as every password is effectively the same master password hashed with a known salt. One might argue that a costly derivation path could make bruteforcing impractical but it doesn't help with the fact that the concept is unsound from the beginning.
- minitech 7y agoA strong master password is what makes brute-forcing impractical.