38 reputation
13
bio website
location
age
visits member for 2 years, 9 months
seen Feb 7 at 19:18

Jan
11
awarded  Notable Question
Jan
16
awarded  Popular Question
Jan
15
comment How can one securely generate an asymmetric key pair from a short passphrase?
I think I'll go for this approach. Like Thomas and Ilmari said, it's possible to derive a key pair for RSA (which is the easiest for me to deploy), but, since only the user needs to know his password to decrypt the files' private keys (and whatever personal info) and to encrypt new private keys, it's just as secure to use AES (again, easiest to deploy for me) with a simple KDF.
Jan
15
awarded  Scholar
Jan
15
accepted How can one securely generate an asymmetric key pair from a short passphrase?
Jan
15
comment How can one securely generate an asymmetric key pair from a short passphrase?
"For RSA, this is less cheap and simple, because the key generation process entails generating random integers until primes are reached. This is still doable." Especially thanks for clarifying this; I feared it to be impossible to derive a prime from a random number (easily). Salting with the user's mail address is quite a good idea, too. (just like the generated salt in e.g. SMF, it should be unique for every user)
Jan
15
awarded  Student
Jan
13
asked How can one securely generate an asymmetric key pair from a short passphrase?