3 ms·
init(SHA3(pass + s)); https://github.com/darkjpeg/darkjpeg.github.io/blob/07171bd0ec1f858ab41fc1fe281ce2af831604d8/source/aes256.js#L203 https://github.com/dar
by nwh 13y ago
init(SHA3(pass + s));
https://github.com/darkjpeg/darkjpeg.github.io/blob/07171bd0ec1f858ab41fc1fe281ce2af831604d8/source/aes256.js#L203 https://github.com/darkjpeg/darkjpeg.github.io/blob/07171bd0...
- capnrefsmmat 13y agoThat's worrisome; they should be using a purpose-built key derivation function, like PBKDF2, bcrypt or scrypt. Using only SHA3 means it is easy to brute-force the key by searching for likely passwords.