logoalt Hacker News

gruez • today at 4:07 PM • 2 replies • view on HN

You're not gonna remember a AES256 key either (or at least not many of them), not to mention the ergonomics associated with entering a AES256 key. The whole point of security chips like google's titan m2 or apple's secure enclave is to strengthen weak passwords (eg. 6 digit pins) so they offer comparable security to 256 bit keys, without having to enter 256 bit keys.


Replies

kalaksi • today at 4:57 PM

Password isn't used directly as key. The key is derived with PBKDF.

➕ show 1 reply
SV_BubbleTime • today at 4:57 PM

>You're not gonna remember a AES256 key either

Did we wake up in a world without key derivation functions to turn passwords/phrases into keys?