logoalt Hacker News

kalaksi • today at 4:57 PM • 1 reply • view on HN

Password isn't used directly as key. The key is derived with PBKDF.


Replies

gruez • today at 5:27 PM

>The key is derived with PBKDF.

Which doesn't do shit even if you're using argon with 32 GB memory usage or whatever. NSA is always going to be able to out-compute you. Not to mention you need a difficulty level that's usable for daily use, but the NSA can brute-force at their leisure, possibly decades in the future.