Tagged Questions
7
votes
1answer
253 views
Is there any known malleability of scrypt outputs?
The scenario is single-use passphrase-based non-interactive message authentication.
The obvious try to do this is to chose a random salt of the appropriate length and send:
...
