113 reputation
4
bio website
location United States
age 22
visits member for 2 years, 2 months
seen Nov 21 at 5:43

Mar
25
comment Tool for public key cryptography where password is the private key?
Yes, but as other people have pointed out the passphrase or a digested passphrase can be used to ceded the random number generator used to produce the RSA key. In other words, you can create a function which maps passphrases to public keys, which is all you need.
Mar
25
awarded  Supporter
Oct
21
comment Seeding GPG keygen with a hashed secret
Oh yikes, ok. Why is it that few? I can see it being N bits less where 1/2^N is the frequency of 2048 bit primes not 10 times less. Does that have to do with the algorithm that's being used to generate said primes?
Oct
21
awarded  Scholar
Oct
21
accepted Seeding GPG keygen with a hashed secret
Oct
20
comment Seeding GPG keygen with a hashed secret
Lol, so only 2045 bits? =)
Oct
20
revised Seeding GPG keygen with a hashed secret
deleted 37 characters in body
Oct
20
comment Seeding GPG keygen with a hashed secret
The latter, because the former still depends on data stored on your computer (external to the user's memory).
Oct
20
awarded  Student
Oct
20
comment Seeding GPG keygen with a hashed secret
But by hashing the password with a function like SHA-3, you can fake that much entropy. So I guess the question is, is there something in that mapping that compromises the integrity of the generated key further? Because we're perfectly fine with only 40 bits of entropy for normal password uses.
Oct
20
awarded  Editor
Oct
20
revised Seeding GPG keygen with a hashed secret
added 449 characters in body
Oct
20
comment Seeding GPG keygen with a hashed secret
Ok, so I guess the second advantage is that you're protected from data loss. From a lay user's standpoint, if public key cryptography were used instead of an authentication system, it would be extremely frustrating to get locked out of an account despite remembering your "password".
Oct
20
asked Seeding GPG keygen with a hashed secret