3 ms·
great one more question, on my rough inspection it looks like the encrypted text and the key is stored in the same database entry. pardon my lack of knowledge,
by Hortinstein 12y ago
great one more question, on my rough inspection it looks like the encrypted text and the key is stored in the same database entry. pardon my lack of knowledge, but this seems insecure.
Can you explain your decision?
- marco1 12y agoThere is a server secret that is not stored in the database at all and there is a message secret (unique per message) that is stored in each message's database entry. They are combined to the actual key for decryption.
- Hortinstein 12y agooh okay, thank you very much!