network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 4 months |
| seen | May 7 at 21:17 | |
| stats | profile views | 0 |
|
Jan 16 |
awarded | Popular Question |
|
Jan 15 |
comment |
How can one securely generate an asymmetric key pair from a short passphrase? I think I'll go for this approach. Like Thomas and Ilmari said, it's possible to derive a key pair for RSA (which is the easiest for me to deploy), but, since only the user needs to know his password to decrypt the files' private keys (and whatever personal info) and to encrypt new private keys, it's just as secure to use AES (again, easiest to deploy for me) with a simple KDF. |
|
Jan 15 |
awarded | Scholar |
|
Jan 15 |
accepted | How can one securely generate an asymmetric key pair from a short passphrase? |
|
Jan 15 |
comment |
How can one securely generate an asymmetric key pair from a short passphrase? "For RSA, this is less cheap and simple, because the key generation process entails generating random integers until primes are reached. This is still doable." Especially thanks for clarifying this; I feared it to be impossible to derive a prime from a random number (easily). Salting with the user's mail address is quite a good idea, too. (just like the generated salt in e.g. SMF, it should be unique for every user) |
|
Jan 15 |
awarded | Student |
|
Jan 13 |
asked | How can one securely generate an asymmetric key pair from a short passphrase? |
