108 reputation
3
bio website georgebashi.com
location Brighton, United Kingdom
age 28
visits member for 1 year, 4 months
seen Apr 7 at 22:23
I'm a Java, C, and Ruby and Flex programmer living in Brighton, UK.

Jul
6
comment Securely generating passwords based on a secret and a public identifier
I meant SSL certificates like I'm used to from setting up HTTPS - i.e. public/private key pairs. I was a little confused about terminology, but your reply has answered my question, thank you.
Jul
6
comment Securely generating passwords based on a secret and a public identifier
@PaĆ­loEbermann I'd like that the identifiers (like testing-db-pass above) and the algorithm be public information (i.e. on github). One secret - which I've realised should just be a large key kept in a file on the system administrator's machine - is then used to deterministically derive secure passwords for each identifier. This should be in such a way that compromise of one password doesn't help the attacker find any other password, despite knowing all the identifiers.
Jul
5
comment Securely generating passwords based on a secret and a public identifier
Thank you for your thorough and detailed answer. Your point about "It is actually using the underlying cryptographic primitives properly" particularly made things click. How does the picture change if I were to use certificates? I'm imagining I could generate a public & private key, use the private key in HMAC as you describe above, but then also use the key pair to do encryption if need be.
Jul
5
awarded  Scholar
Jul
5
accepted Securely generating passwords based on a secret and a public identifier
Jul
4
awarded  Student
Jul
4
asked Securely generating passwords based on a secret and a public identifier
Jul
4
awarded  Autobiographer