3 ms·

(author of Badger) Keeping things simple. If you can break it (decrypt data without knowing the master key), we'll be happy to pay you a bounty. We can extend i

• sneak 7y ago
  > Note that you should never use a predictable string as your master key. If you have a password manager (such as 1Password, LastPass, etc.), you can use its built-in password generator to generate a strong encryption key. Reducing the keyspace to only ASCII/printable is a pretty big deal, although judging by the article and not the code, I doubt brute force is the way to break your system. The method you are employing (cracking contests) is another thing that projects commonly do that makes people trust their implementations less. Inventing a cryptosystem is a pretty big task. I haven’t looked at your code. How are you sure that you got it reasonably right? Furthermore, why do you believe it’s better to do this in the application than, say, with LUKS?