2 ms·
Disclaimer: am not a cryptographer. > First, passwords are terrible sources of entropy. Use a KDF. > users want to change passwords without needing to re-enc
by rollcat 2y ago
Disclaimer: am not a cryptographer.
> First, passwords are terrible sources of entropy.
Use a KDF.
> users want to change passwords without needing to re-encrypt every single block
You've gone into a little more detail than OP, but I don't think it was necessary to disagree. The overall idea (even if simplified) is solid.
I've recently argued for the same solution for Linux: https://news.ycombinator.com/item?id=42739214 https://news.ycombinator.com/item?id=42739214