11 reputation
1
bio website
location
age
visits member for 2 years, 8 months
seen Dec 17 '13 at 7:55

Feb
27
comment How can I store a combination of multiple pass phrases?
I know how hash works (but not this password derivation function, which sounds very interesting, ty for that), and i would certainly use it if i would implement my solution, but i was asking just for a hypothetical situation where you can only encrypt your password, not hash it. And about generated phrase, it depends on first so that without original it is no good by itself :)
Feb
27
comment How can I store a combination of multiple pass phrases?
What i meant by harder guessing is that usually attacker can guess user password, because many people use common words for it. Even if attacker guessed main pass phrase and knows how the other pass phrase is formed, it won't be that easy to guess the second phrase because there is human factor involved when generating (so it's more unique for every person). Ofc, that doesn't mean it can't be found by brute force, as every password can be cracked with it if you have enough time.