5 ms·
What, pray, is "SHA3 key generation"
by yid 13y ago
What, pray, is "SHA3 key generation"
- ChuckMcM 13y agoWell it's got to be super sekrit so it needs the best SHA algorithm, what better than the one that even the NSA hasn't picked yet? :-)
- yid 13y agoOh I'm sure the NSA has already picked it ;) NIST just hasn't yet...
- harshreality 13y agoKeccak was picked by NIST last October as the winner of the SHA-3 competition.
- p4bl0 13y agoI thought Keccak has already been chosen to be SHA-3, is it not the case?
- harshreality 13y agoThat they're using SHA3 as a key generation function to convert a passphrase to a key for encryption? What else would it mean?
- yid 13y agoSee the reply by capnrefsmmat
- harshreality 13y agoThe wisdom of using a homegrown sha-3 based algorithm for key generation is separate from what "sha-3 key generation" means.
- nwh 13y agoinit(SHA3(pass + s)); https://github.com/darkjpeg/darkjpeg.github.io/blob/07171bd0ec1f858ab41fc1fe281ce2af831604d8/source/aes256.js#L203 https://github.com/darkjpeg/darkjpeg.github.io/blob/07171bd0...
- capnrefsmmat 13y agoThat's worrisome; they should be using a purpose-built key derivation function, like PBKDF2, bcrypt or scrypt. Using only SHA3 means it is easy to brute-force the key by searching for likely passwords.