We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [password-based-encryption]

Encryption using a key derived from a password or passphrase entered by the user.

12 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
80 views

How would quantum computers affect password based encryption?

At first glance: Assuming that the output of the password hashing function is large enough, quantum computers should have no effect on password encryption as on symmetric cryptography in general. Is ...
5
votes
0answers
137 views

How safe can PKZIP-compatible encryption be?

PKZIP encryption has been around since 1990, and its decryption is directly supported in most desktop environments (Windows, MacOS, most Linux distros). This makes it one of very few options when ...
4
votes
0answers
81 views

Upgrading key derivation by adding a XOR with a known value

In general keys for password based key derivation are derived from a password hash such as the old PBKDF2 function or Argon2, possibly followed by another derivation function to derive data and ...
2
votes
0answers
60 views

Did “The Catena Password-Scrambling Framework” make an error in the reduction of its pseudorandomness?

I was reviewing the most recent version of the Catena paper and they made some claims that I find questionable in their reduction of the pseudorandomness of the output of Catena (p. 32). First I will ...
2
votes
0answers
118 views

SPAKE2 - Pairwise keys with multiple participants

With magic wormhole, I've discovered SPAKE(2) and I was wondering if it is possible to derive pairwise shared keys between multiple participants still using one password only. More precisely, amongst ...
1
vote
1answer
166 views

Hardware, Handheld Password Manager

I am currently working on a hardware project that will utilize the native USB and keyboard emulation capabilities of the Teensy device. Essentially, the user will store an encrypted password database ...
0
votes
0answers
30 views

End to end encrypted web chat app with stored messages in database

I am working on a web app with an integrated chat. All chats can only occur between two users - not more, not less. I am very concerned with security, so I would like to encrypt all chat messages with ...
0
votes
0answers
27 views

What are some best practices to handle user password in shell script and environment variables?

I'm new to this community. Currently im working on a project which involves handling user password in shell script. Following steps describe my password consumption flow: Get password from user ...
0
votes
0answers
24 views

Using PIN to enable MFA for YubiKey-based logon provider

I've created a custom credential provider (for Windows) that allows logon just by inserting a YubiKey. The user's Windows password is protected as follows: ...
0
votes
0answers
37 views

Authenticating without sending password to the server, and store data encrypted with password derived key on server

I am trying to think of a scheme that would allow a user to authenticate to a server, whithout sending the password to the server, and to also derive a symetric key on the client (that also never gets ...
0
votes
2answers
431 views

How to validate a PBKDF2 password

I want to encrypt several files correctly with a PBKDF2 generated key (using a password and salt), I am currently doing so but if I enter the wrong password, as expected an exception occurs. Note: ...
0
votes
0answers
203 views

Encrypt/Decrypt cloud passwords with master password

I know it's generally bad to store password in the clouds, and that I should be using salted-hashed password only. I'm making an application that will authenticate a user (with salted-hash), and then ...