Tag Info

New answers tagged


Yes this would be secure. Why would it be secure? Because you would be running HMAC (the underlying primitive of PBKDF) as a stream-cipher using some key-derivation function. As this is a common approach (at least for integrated encryption schemes) using this would at least as secure as using the bare KDF and a salt. However I'd strongly argue against ...


The reality is if other processes can access your process memory or features of your virtual machine, the game is probably over as your already compromised. If a process has access at this level, it can probably gain other information, such as the initial credentials used to authenticate prior to obtaining the token or just modifying results to make token ...

Top 50 recent answers are included