4 ms·
Considering the average user's password choice tendencies, that's still weaker than a key from a proper source of entropy, then password reuse on top of that.
by blueskin_ 13y ago
Considering the average user's password choice tendencies, that's still weaker than a key from a proper source of entropy, then password reuse on top of that.
That plus IIRC, RSA isn't deterministic even with the same seed. Not sure about generators for elliptic curve though.
- icebraining 13y agoI think it is, at least that's what Cryptico[1] does, if I understand it correctly. [1] https://github.com/wwwtyro/cryptico https://github.com/wwwtyro/cryptico
- tga_d 13y agoThey're using key-stretching to mitigate the use of bad passphrases, though reuse will still be an issue. https://wiki.mozilla.org/Identity/AttachedServices/KeyServerProtocol#Client-Side_Key_Stretching https://wiki.mozilla.org/Identity/AttachedServices/KeyServer... And RSA is deterministic.