3 ms·
> attacking the ciphertext data would be infeasible If insufficiently protected, any attack surface may be compromised. It’s just a matter of time, resources,
by rm_-rf_root 2y ago
> attacking the ciphertext data would be infeasible
If insufficiently protected, any attack surface may be compromised. It’s just a matter of time, resources, and will.
“The only winning move is not to play.”
- commandersaki 2y agoI don't know what you mean by insufficient protection, but as I said proper E2EE implementation provides sufficient protection. A symmetric encryption scheme that satisfies IND-CCA2 with a high entropy key is infeasible to decrypt without knowledge of the key. This is well understood basics of cryptography. LastPass failed at the high entropy key part / slow password hash, but also leaking metadata in plaintext. Pretty much other password managers don't have this issue, both local and cloud based.