3 ms·
> the secret remains secret An attacker in a position to grab password hashes is also going to be in a position to grab that secret. No matter how you shuffle
by px43 3y ago
> the secret remains secret
An attacker in a position to grab password hashes is also going to be in a position to grab that secret. No matter how you shuffle and try to hide it, there's not really a way around that.
- asimpletune 3y agoI meant, for the purpose of my threat model, I am not concerned with defending against attacks on the secret and we can just assume the storage of it is safe or out of scope, whichever interpretation you prefer.