Timeline for Hashed password used for encryption and for user authentication at the same time
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 14, 2021 at 10:28 | comment | added | jjj | Do NOT send everything that is needed for decryption to any server, do decryption locally. Otherwise a compromised server can intercept it and decrypt eveything. | |
| Oct 14, 2021 at 7:44 | comment | added | kelalaka | It is just the standard password hashing How to securely hash passwords?. You have one password and separate the domains by salt and info. | |
| Oct 14, 2021 at 7:39 | comment | added | simbr | @kelalaka Can you please explain how to also solve the user authentication part with the same password. Thank you. | |
| Oct 14, 2021 at 7:29 | comment | added | kelalaka | Where did you see both? They are not good approaches since the user may want to change the passwords. You create a random encryption key per file, and encrypt the key with the key-encryption key generated from password like PBKDFDF2 or better Argon2id. You can see here in more detail. When data at rest, the files are protected with random keys and only your password can open it. A good password like from dicewire is recommended. | |
| S Oct 14, 2021 at 7:16 | review | First questions | |||
| Oct 14, 2021 at 7:22 | |||||
| S Oct 14, 2021 at 7:16 | history | asked | simbr | CC BY-SA 4.0 |