3 ms·
I like that idea, but what do you do when someone changes their password? Decrypt/Reencrypt all their messages?
by jonah 17y ago
I like that idea, but what do you do when someone changes their password? Decrypt/Reencrypt all their messages?
- deleted 17y ago[deleted]
- jpwagner 17y agostore the password change history...
- dchest 17y agoEasy: encrypt a random encryption key with password (I mean, with a key derived from password). Then encrypt content with this random key. When user changes password, re-encrypt the same key using a new password. No need to re-encrypt contents, because it's still encrypted with the same key. This is how it's done in most disk encryption software, for example, FileVault.