Timeline for Securely generating passwords based on a secret and a public identifier
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 13, 2019 at 11:16 | comment | added | fadedbee | I've implemented a deterministic password generator passassin.com which uses master-passphrase (which you could keep on your trusted machine, or in your head) and a site name. It produces passwords with commonly required numbers of capitals, digits, symbols, etc. | |
| Jul 6, 2013 at 15:33 | comment | added | George Bashi |
@PaŭloEbermann I'd like that the identifiers (like testing-db-pass above) and the algorithm be public information (i.e. on github). One secret - which I've realised should just be a large key kept in a file on the system administrator's machine - is then used to deterministically derive secure passwords for each identifier. This should be in such a way that compromise of one password doesn't help the attacker find any other password, despite knowing all the identifiers.
|
|
| Jul 6, 2013 at 11:14 | comment | added | Paŭlo Ebermann | What are your security goals? | |
| Jul 5, 2013 at 11:26 | vote | accept | George Bashi | ||
| Jul 4, 2013 at 16:59 | history | tweeted | twitter.com/#!/StackCrypto/status/352833994863288320 | ||
| Jul 4, 2013 at 13:59 | answer | added | Thomas | timeline score: 4 | |
| Jul 4, 2013 at 13:38 | review | First posts | |||
| Jul 4, 2013 at 14:55 | |||||
| Jul 4, 2013 at 13:18 | history | asked | George Bashi | CC BY-SA 3.0 |