Tag Info

Hot answers tagged


If your environment was fully compromised you could at no point actually decrypt your data, defeating the purpose. So I’m going to assume the user only uses an authentic client and the client’s memory is protected during execution. Generate a private/public keypair. Store the public key on the server, encrypt the private key with the user’s passphrase and ...


Public-key cryptography is not sufficiently computationally burdensome to where other approaches must be used for authentication protocols. Note though that what you describe is not actually public-key based. The verification of the MAC requires Dave and Bob to both have a shared key. Also, note that a random component must be included in some manner in all ...

Only top voted, non community-wiki answers of a minimum length are eligible