3 ms·
> What he says is correct, the attackers now have the private key file I will concede that this is highly likely, but they did not confirm that the private key
by darkarmani 14y ago
> What he says is correct, the attackers now have the private key file
I will concede that this is highly likely, but they did not confirm that the private key was taken.
- UnoriginalGuy 14y agoIt is implied that it was taken. The IRC log said that they had taken it and since Linode is talking about the passphrase in their blog post, the implication there is that it was taken too. If the bad guys didn't have the private key then the passphrase is literally irrelevant to the discussion. Since they would have to break the primary cryptographic key rather than just the passphrase. A passphrase protects a private key file NOT the data. So why would Linode even bring it up?
- darkarmani 14y ago> A passphrase protects a private key file NOT the data. So why would Linode even bring it up? I would bring it when discussing how I cryptographically secured sensitive data. Especially, when people might be confused and try to argue that they should have used pbkdf2 and not encrypted the information (because they were thinking about password hashes).