2 ms·
> You could make the key generation intentionally slow though to limit the crack speed. Am attacker keen enough to bruteforce can easily copy the ciphertext, I
by pritambaral 4y ago
> You could make the key generation intentionally slow though to limit the crack speed.
Am attacker keen enough to bruteforce can easily copy the ciphertext, IV, and salt to a tool that doesn't have a slowdown. Or, just modify the JS to remove the artificial slowdown.
- GeorgeHoneywood 4y agoPresumably they are using some KDF (Key derivation function) that is designed to be algorithmically slow in some way that you can't trivially sidestep.