18 reputation
2
bio website
location
age
visits member for 1 year, 8 months
seen Jan 5 '13 at 14:57

Nov
9
comment User authentication + database encryption with same password
@BrendanLong correct, that is the purpose - I'm not storing the scrypted key directly. Polynomial: I think David in the other answer got my question better, sorry for not formulating it more clearly for you. Thanks for the answer though, I learned something anyway! :)
Nov
9
comment User authentication + database encryption with same password
Thanks! I sort-of thought that because I had seen that it's better to use a proper hashing function than basically a made up one. The only reason why I thought it might be less secure in this situation is because an attacker knows the parameters I'll use in SCrypt, and therefore knows the format of the data I'm putting in the SHA function (allways a 32 byte pseudorandom number). I didn't know if that would compromise it. Even when salting the SHA256 the attacker would still know the exact number of bytes going in.
Nov
9
awarded  Scholar
Nov
9
accepted User authentication + database encryption with same password
Nov
8
awarded  Student
Nov
8
revised User authentication + database encryption with same password
edited tags
Nov
8
asked User authentication + database encryption with same password