Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

LastPass encrypts its data before sending it to their servers. The key for the data is generated using a combination of the master password and username.

How then can a one-time password be used to decrypt this data? The data on the server has been encrypted with the master password and username. Does this mean that LastPass stores a new version of encrypted data for every (single-use) password?

share|improve this question
    
They key for the data should be generated in a way that also involves salt. $\hspace{2.2 in}$ (I have no other reason to believe that it actually is.) $\:$ –  Ricky Demer Jan 12 '13 at 19:18
add comment

2 Answers

up vote 4 down vote accepted

As hunter notes, the only people who can really say what LastPass actually does are those who work there. However, as long as we only consider what they can and should do...

They don't really need to store a separate copy of your data for each one-time password. Instead, all they need to store for each password is an encrypted copy of the key used to actually encrypt the data.

So, when you log in using a one-time password, the password is (presumably) passed through PBKDF2 to derive a "key-encryption key", which is then used to decrypt the actual key needed to decrypt the data.

share|improve this answer
    
thanks for the insight - this solution makes much more sense than cloning the data. LastPass states on their website that "LastPass utilizes the PBKDF2 function implemented with SHA-256 to turn your master password into your encryption key". Strictly speaking, assuming that they implement the system you've described above, then the hash of the user password is not actually the resulting encryption key, but rather an intermediate key to decrypt the final key. –  hunter Jan 15 '13 at 16:24
    
@hunter: I suppose they might derive the actual encryption key directly using PBKDF2 from the user's permanent password, and then save an encrypted copy of that key for each one-time password. Or the statement on the website might just be missing some details. –  Ilmari Karonen Jan 16 '13 at 2:48
add comment

The only people who can answer your question definitively are the programmers at LastPass, however, I'll try.

I assume you're referring to this. If LastPass really does encrypt your data with your password/username, then logically it could only be decrypted with the same key.

Their 'one-time' password feature is an interesting idea, but I'm dubious about it. They use 256-bit AES to encrypt your data - this is symmetrical encryption, which means that there's only one single key used for encryption/decryption.

In answer to your question, yes - it would make sense that they would have to create/store a copy of your data, encrypted with the 'one-time' password, for each one-time password that you create.

The only way (that I can think of) to avoid making a separate copy of your data for each 'one-time' password is if there is a server-side 'back-door' into your account, which would put your data at extreme risk (but I doubt this is the case).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.