Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
2
Newest
 Student
Impact
~391 people reached

Aug
1
comment Is truncating a hashed private key with SHA-1 safe to use as the symmetric key for AES for data at rest?
Ah, good point. Thanks!
Jul
31
comment Is truncating a hashed private key with SHA-1 safe to use as the symmetric key for AES for data at rest?
In the instance of PBKDF do you think it would be okay to use the first X bytes (recommended more than 64 bits), so say something like the first 64 bytes (instead of bits) as the salt and the rest of the 1024 or so bit RSA key as the 'password' for PBKDF? Do you think the first 64 bytes wouldn't contain enough random information if the data represented a private key struct that had a little bit of header information in the first 8-10 bytes?