New answers tagged

1

Let's approach the question from this direction. PAKE tries to solve this problem: Alice has a password $PW_{a}$, and Bob has a password $PW_{b}$; consider a protocol where Alice and Bob exchange messages, and generate encryption keys $E_{a}, E_{b}$ where $E_{a} = E_{b}$ if $PW_a = PW_b$ (and unrelated if $PW_a \ne PW_b$); if they're the same, Alice and Bob ...


2

Like I wrote in the comment, the method here is pretty similar. The differences: Rather than deriving each site password directly from the password, I recommended deriving a single master secret using a password hash and then deriving the site passwords from that using another KDF. You are truncating the PBKDF2 output to 64 bits. You define the method of ...



Top 50 recent answers are included