5 ms·

> I don't think age does any real password extension. Did you even bother to check? https://github.com/FiloSottile/age/blob/main/scrypt.go https://github.com/

• upofadown 4y ago
  That is source code. I as a user should not have to look at the source code so that I can use a program.
  • some_furry 4y ago
    If you feel yourself technically proficient enough to comment on cryptography (mostly PGP apologia), then you should be capable of looking at source code to figure out whether or not something "does any real password extension". If anyone else (i.e. "a user") made this mistake, I'd be more sympathetic. But not for you. You don't get to have your cake and eat it too. Are you a cryptography expert, or aren't you? If yes, then failing to bother to check the source code is a faux pas. If no, then I expect you to stop trying to argue as a cryptography expert the next time someone points out that PGP is bad cryptography. I don't care which you choose. I only ask that you stick to it.
  • deathanatos 4y ago
    … okay, then look at the spec, which is beautifully simple: https://github.com/C2SP/C2SP/blob/main/age.md#the-scrypt-recipient-type https://github.com/C2SP/C2SP/blob/main/age.md#the-scrypt-rec...
    • upofadown 4y ago
      [flagged]
      • tptacek 4y ago
        This, too, is a troll comment. Obviously, they're using scrypt, and so your claim upthread (and here) that they might not be doing any "work extension" is pre-falsified. Please stop trolling on these threads.