8 ms·
Using a KDF such as scrypt for that example does make a lot of sense, and after considering some others, I must admit, makes a lot of sense for most circumstanc
by keeperofdakeys 13y ago
Using a KDF such as scrypt for that example does make a lot of sense, and after considering some others, I must admit, makes a lot of sense for most circumstances.
I also had a quick look at the tarsnap source code, and I see you do exactly that for the passphrased keyfile.
- cperciva 13y agoYes -- in fact, that's why I invented scrypt, because I was adding passphrase encryption to tarsnap key files and wanted to do it as securely as possible.