3 ms·
Nitpick: This is not unbreakable crypto. This is more of a more secure key storage mechanism. Perhaps also a good defense against phishing attacks. And it's
by bunderbunder 14y ago
Nitpick: This is not unbreakable crypto. This is more of a more secure key storage mechanism. Perhaps also a good defense against phishing attacks.
And it's not unbreakable. For starters, this system absolutely requires that the passwords be stored in the clear.
- rytis 14y agoWhat about encrypting your 'secret' password with normal password? So you get assigned this 30 characters password, which you learn. Then you use normal password (like 'password123' :) ) to encrypt that string. Then when you need to log on, you first type in you normal password to decrypt your 'secret' password, which is then used to authenticate you further. I know, sounds ridiculous, just thinking out loud. edit: yes, i know, encrypting the key with another string makes it just that tiny little bit secure, technically it's still plain text...
- chrisbroadfoot 14y agoIt sounds ridiculous for a reason. The weakest link in that chain is still the low-entropy password.
- anologwintermut 14y agoIt's not even that. YOu can't store a key with this divice because for the authentication game to work, the system has to have the password.
- bunderbunder 14y agoTrue. So it's not unbreakable, nor is it crypto. I'm not sure if it's anything, really.
- anologwintermut 14y agoHype.