2 ms·
Actually I have a second question about this point.. Does this mean it would allow the user in even if the password is mistyped?
by im3w1l 4y ago
Actually I have a second question about this point.. Does this mean it would allow the user in even if the password is mistyped?
- tptacek 4y agoNo, if you mistype the password then the server can't look up your escrowed RSA key (it's looked up with an "authentication key" derived from PBKDF2).