4 ms·
How do you do client side hashing without the server sending the salt/pepper to the client, which is a really bad thing?
by ncann 5y ago
How do you do client side hashing without the server sending the salt/pepper to the client, which is a really bad thing?
- notfed 5y agoThere are answers to this. I asked myself this a few years ago, which led recursively to new tricky questions. I eventually solved the tree of the questions: I designed myself into a solution that I later realized was essentially an asymmetric PAKE (e.g., analogous to OPAQUE). So, an attempt to solve your question eventually leads to using an asymetric PAKE. But, this is way, way more complex. You'd really have to squint your eyes to believe that the diminishing returns are worth it.