soumyadeb

29 ms·

1. 301.▲
   by soumyadeb 15y ago

   Also, for your bonus question you can do something like this. Enc-Priv-Key = Priv-Key XOR Trun(Hash(password)) where Trunc = Function to truncate to the length of the priv-key. So, every (Enc-Priv-Key,password) pair combination is valid - i
2. 302.▲
   by soumyadeb 15y ago

   I was actually thinking that the client would store the private key somewhere (e.g. in an HTML5 browser:)) but what you described is brilliant and definitely works. Something like that is not used probably because the bigger problem is clie
3. 303.▲
   by soumyadeb 15y ago

   IMO, what would be really ideal is the following goal - An attacker who has access to the server database and also is watching the network traffic should not be able to impersonate the client(user) later. The double hashing scheme doesn't a
4. 304.▲
   by soumyadeb 15y ago

   The main stream adoption of such a technology would require installing bio-metric readers or bio-metric ID card readers at the millions of laptops and desktops and tablets. That's very unlikely to happen before 2017. At the most it can be a