3 ms·
It's not clear how datetime was used and why that became a weakness? Doesn't it improve the password security by taking some bytes from /dev/random and salting
by declan_roberts 2y ago
It's not clear how datetime was used and why that became a weakness? Doesn't it improve the password security by taking some bytes from /dev/random and salting it with <timestamp>?
- Stagnant 2y agoThe roboform password manager used datetime value as the seed of the pseudorandom generator, meaning that it would always generate the same password if the system clock time was the same. They managed to crack the wallet by reverse engineering the password manager and feeding its pseudonumber generator all datetime values between certain dates that were thought to be near the time when the original wallet owner had generated the password.
- fragmede 2y agoyes so knowing the datetime that was used to salt reduces the search space.
- JohnKemeny 2y agoSalt is not the same as seed.
- fragmede 2y agoyou're right. too late to edit now though